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PSINet  CEO  William  Schrader  has 
bought  50  ISPs  worldwide.  Page  33. 
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Cisco  Powered  network  program 

fails  to  move  users 
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Service 
providers 
have  few 
complaints ,  PROGRAM 

but  say  Cisco's 
CPN  program  hasn't 
generated  much  new 
enterprise  business. 


BY  JIM  DUFFY 

SAN  JOSE —  More  than 
two  years  after  its  launch, 

Cisco's  joint  marketing  pro¬ 
gram  for  service  providers 
is  generating  little  demand 
from  enterprise  network 
customers  looking  for  next- 
generation  IP  services. 

Cisco  kicked  off  the 
Cisco  Powered  Network 
(CPN)  program  in  June  1997,  in  an  effort  to  increase  its  visibil¬ 
ity  and  sales  in  the  service  provider  realm,  and  to  raise  the 
profile  of  customers  who  use  Cisco  equipment. 

The  ultimate  goal  of  the  CPN  program  is  to  create  new  ser¬ 
vices  for  the  enterprise  market,  such  as  virtual  private  net¬ 
works  (VPN),  IP  telephony  and  application  hosting,  says  Kevin 
Outcalt,  Cisco's  CPN  program  director. 

"What  we  really  wanted  to  do  was  to  work  with  the  service 
providers  that  were  Cisco-based  and  give  them  the  capability 
to  enable  Internet  services  for  their  customers,"  Outcait  says. 

See  CPN,  page  84 


Bid  to  allow 
'Net  wiretaps 
draws  fire 


BY  CAROLYN  DUFFY 
MARSAN 

Citing  security  risks,  net¬ 
work  managers  are  lining  up 
to  oppose  a  proposal  within 
the  Internet  engineering  com¬ 
munity  to  develop  protocols 
that  would  make  it  easier  for 
law  enforcement  agencies  to 
intercept  communications 
See  Wiretap,  page  14 
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A  RIGHTS  VIOLATION? 

Participants  in  our  forum  are  up  in 
arms  over  'Net  wiretapping.  "If  I  have 
committed  no  crime  why  are  my 
civil  rights  being  suspended?  If  I  have 
committed  a  crime  why  am  I  not 
in  jail?"  one  reader  asks.  What  do 

you  think?  Adttk. 
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Are  VLANs  on  the  comeback  trail? 


BY  JEFF  CARUSO 

After  stumbling  out  of  the 
limelight  a  few  years  ago,  virtu¬ 
al  LANs  may  be  poised  for  a 
comeback,  thanks  to  the  efforts 


of  two  standards  bodies. 

The  IEEE  has  two  projects 
under  way:  One  that  would 
standardize  the  practice  of  seg¬ 
menting  VLANs  by  protocol, 
and  another  that  would  make 


VLANs  more  resistant  to  fail¬ 
ures.  In  addition,  the  Internet 
Engineering  Task  Force  (IETF) 
is  crafting  a  way  for  third-party 
software  to  manage  multiven¬ 
dor  VLANs. 

The  advancements  — 
which  build  on  the  standardiza¬ 
tion  of  VLAN  tagging  in  IEEE 
802. IQ  last  year  —  are  renew¬ 
ing  interest  in  the  technology, 
even  if  some  analysts  say  Layer 
3  switches  do  away  with  the 
need  for  VLANs  (see  story, 
page  10).  A  recent  Infonetics 
Research  survey  found  that 
See  VLANs,  page  1 0 


NDS  gap  puts 
users  in  a  bind 


Lost  feature  complicates  NetWare/Win  2000  mgmt. 


BY  JOHN  FONTANA 

PROVO,  UTAH  —  Novell  has 
quietly  shelved  a  key  directory- 
integration  tool,  which  will 
likely  force  IT  executives  with 
mixed  environments  to  make 
an  either/or  choice  between 
NetWare  and  Microsoft’s  forth¬ 
coming  Windows  2000. 

And  that  choice  may  not  be 
good  news  for  Novell. 

At  issue  is  the  redirect 
capability  of  Novell  Directory 
Services  (NDS)  for  NT.  Re¬ 
direct  allows  users  to  reroute 
authentication  and  access-con¬ 
trol  calls  made  to  NT  4.0 
domains  into  NDS,  which 
nearly  eliminates  user  manage¬ 
ment  on  NT  servers. 

However,  in  NDS  8  for  NT, 
the  next  version  of  the  soft¬ 
ware,  redirect  is  being  replaced 
by  a  bidirectional  synchroniza¬ 
tion  tool  called  DirXML. 

The  switch  means  NDS 
shops  will  no  longer  be  able  to 
sidestep  administration  in  the 
Microsoft  environment  if  they 


upgrade  to  Windows  2000 
Active  Directory. 

Administrators  will  have  to 
manage  both  network  operat¬ 
ing  system  directory  services. 

“I’m  concerned  about  the 
immediate  absence  of  redi¬ 
rect,”  says  Peter  Cruikshank, 
network  architect  for  the  U.S. 

See  Novell,  page  1 8 


Fear  of  giving  up  control  js  haunting 
many  WAN  outsourcing  efforts.  Stephen 


Roberts  took  the  plunge  and  went  tp  9 
managed  WAN.  but  the  results  |fp 
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Studies  show  that  if  Web  users  have  to  wait  longer  than 

8  seconds  for  pages  to  download,  chances  are  they're 

history.  Conventional  technology  has 

focused  on  rocketing  packets  from 

A  to  B.  But  because  Web  traffic  is 

unpredictable,  event-driven,  and 

conversational,  managing  it  requires 

intelligence,  as  well  as  speed. 

ihe carrier-dass cs-800 supports  ArrowPoint's  Content  Smart™  Web 

7  billion  hits  per  day  and  ,  ,  ..  .  ,  . 

Switch  is  the  only  Web  switch  designed 

scales  to  1  million  concurrent 

flows  pei  web  switch.  specifically  for  the  rigors  of  the  next 
generation,  e-business  Internet.  Only  ArrowPoint's 
URL  switching  sends  content  requests  to  the 


bringing  an  end  to  "Server  Not  Found."  But  we  don't  stop 
there,  because  only  ArrowPoint  also  optimizes  content 
delivery  -  90%  of  today's  Web  traffic  -  using  the  best 
server  located  anywhere  in  your  distributed  network. 

ArrowPoint  Web  switches  eliminate  aggravating  waits 
and  help  your  site  keep  its  cool,  even  with  flash  crowds. 
They  create  sticky  connections  so  shopping  carts  don't 
suddenly  vanish.  And  they  deliver  big  content  flows  - 
like  streaming  media  -  fast. 

ArrowPoint,  the  Web  switching  pioneer,  is  already 
on  the  job  providing  intelligence  and  performance  with 
content  smart  Web  services  for  some  of  the 
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world's  leading  Web  hosting,  broadband 
best  site  and  server  based  on  real-time  ArrowPoiNt'  and  e-commerce  companies.  Check  out  our 
application  and  content  availability  -  COMMUNCATIONS  Web  site  to  see  what  we  can  do  for  you. 

When  Web  Performance  is  Your  Business 

www.arrowpoint.com 

Free  Product  info  enter  NWInfoXpress  #105  online  @  www.networkworid.com/infoxpress 
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THIS  WEEK 
ON-LINE 

Sexism  in  IT.  A  reader  says  she's 
tired  of  being  mistaken  for  a  booth 
babe  and  "can’t  afford  the  neces¬ 
sary  plastic  surgery  to  make  me 
ugly."  Her  colleagues  ignore  her 
suggestions  but  take  the  same 
advice  from  male  colleagues.  "Not 
only  have  I  pulled  cable,  I  have 
climbed  through  cable  ducts  and 
piloted  cherry  pickers,"  she  says.  Is 
sexism  alive  in  IT?  DocFinder:  5239 

Keeping  current. 

Setting  your  Web  strat¬ 
egy  can  be  a  daunting 
task.  How  high  up  the 
food  chain  should  this 
effort  go?  Fred  McClimans  says 
getting  the  right  people  involved 
can  make  or  break  your  online 
effort.  DocFinder:  5238 

Feeling  insecure?  Catch  up  on  the 
latest  security  patches  with  our 
Security  Alert  area.  Each  day,  we 
update  the  database  to  include 
bug  fixes  for  some  of  the  most 
common  network  packages.  From 
Red  Hat  Linux  to  Java  to  Hewlett- 
Packard's  net  management  soft¬ 
ware,  we've  got  you  covered. 
DocFinder:  4735 

In  search  of  Dilbert's 
mom.  Dilbert  used  to 
be  the  ubergeek  who 
explained  networking 
to  his  clueless  boss 
and  was  upbraided  by  his  network- 
engineer  mom.  But  now  he's  hawk¬ 
ing  office  supplies.  So  where  do 
you  go  for  a  good  dose  of  network 
humor?  Online  Editor  Adam  Gaffin 
descends  to  the  depths  of  "The 
Bastard  Operator  from  Hell" 
and  seeks  enlightenment  from 
CaveBear's  Super  Networking 
Performance  Products  Catalogue. 
DocFinder:  5240 

The  daily  dish.  Network  World 
has  expanded  its  lineup  of  daily 
news.  Each  day,  we  post  more 
than  a  dozen  breaking  stories  to 
keep  you  in  the  know  about  what's 
happening  in  the  network  industry. 
Our  expert  staff  offers  you  up-to- 
the-minute  reports  from  around 
the  world.  And  you  can  have  free 
daily  digests  sent  straight  to  your 
desktop  when  you  sign  up  for  our 
NetFlash  newsletter. 

DocFinder:  3850. 
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John  Sturm  took  a  crash  course  in 
Web  technologies  to  prepare  for  his 
new  Internet-based  job.  Page  69. 
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Slamming  complaint  'dogs'  Qwest 

The  Federal  Communications  Commis¬ 
sion  last  week  nailed  Qwest  on  a  slamming 
complaint  and  gave  the  carrier  30  days  to 
show  why  it  should  not  be  fined 
$2.08  million. 

Slamming  is  the  practice  of  changing 
someone’s  long-distance  carrier  without 
explicit  authorization.  The  complaint 
involves  30  consumers,  one 
of  whom  alleged  that  Qwest 
switched  his  carrier  on  the 
basis  of  an  authorization 
“signed"  in  the  name  of  his 
deceased  dog,  Boris.  (The 
subscriber  had  listed  his 
number  in  his  dog  s  name  in 
the  telephone  directory  for 
privacy  reasons.) 

In  another  case,  the  com¬ 
plainant  said  the  authoriza¬ 
tion  letter  presented  by 
Qwest  was  signed  in  the 
name  of  her  husband,  who 
died  eight  years  ago. 

Some  of  the  complaints  originated  with 
LCI  International,  a  carrier  Qwest  acquired 
last  year.  Qwest  released  a  statement  say¬ 
ing  it  disapproves  of  slamming  and  is  tak¬ 
ing  measures  to  prevent  it. 

Sun  takes  a  shine  to  NetBeans  .  .  . 

Sun  last  week  rounded  out  its  develop¬ 
ment  tools  products  by  acquiring 
NetBeans,  a  Czech  Republic  company 
with  about  40  developers,  and  finalizing 
its  acquisition  of  Forte  Software.  Sun 
would  not  disclose  the  terms  of  the 
NetBeans  deal. 

NetBeans’  products  are  widely  used  for 
building  fairly  simple  Java  applications  on 
the  Linux  operating  system,  Sun  says.  For 
more  complex,  distributed  Java  applica¬ 
tions,  Sun  now  offers  Forte  for  Java 
Enterprise  Edition  —  formerly  Forte 
Software’s  SynerJ  product.  Forte  is  now  a 
wholly  owned  Sun  subsidiary. 

.  .  .  and  bets  $200M  on  Java  start-ups 

Sun  also  said  it  was  ponying  up  $200 
million  and  forming  an  investment  fund  to 
back  Internet  start-ups  that  are  betting 
their  future  on  Sun’s  Java  and  related  prod¬ 
ucts  and  services. 

Jonathan  Schwartz,  formerly  the  vice 
president  for  Sun’s  development  tools 
group,  was  named  to  head  the  fund,  called 
Sun  Equity  Investment  Portfolio. 

The  fund  will  work  with  venture 
capitalists  and  investment  banks  to 
take  minority  stakes  in  fledgling  Internet 
companies. 

Besides  the  money,  Sun  will  offer  all  the 
sage  advice,  contacts,  shrewd  marketing 
ideas  and  other  neat  stuff  one  expects 
from  a  venture  capitalist. 


Cisco,  Polycom  put  phones  together 

Cisco  and  Polycom  last  week  said  they 
have  entered  into  a  five-year  joint  devel¬ 
opment,  licensing  and  sales  agreement  for 
IP  telephony. 

Cisco  will  incorporate  Polycom’s  Acous¬ 
tic  Clarity  Technology  into  the  next  gener¬ 
ation  of  Cisco’s  IP  telephony  handsets. The 
companies  will  also  integrate  Cisco  IP  tele¬ 
phony  technology  into  the 
next-generation  of  Polycom’s 
SoundStation  conference 
phone,  and  incorporate 
Cisco’s  AWID  Open  Tele¬ 
phony  interface  into  future 
Polycom  IP  telephones  and 
other  endpoint  products. 

For  news  on  Polycom’s 
latest  videoconferencing 
systems,  see  story,  page  24. 

NetManage  snaps  up  a 
competitor 

The  slowly  shrinking 
number  of  players  in  the  host  access  mar¬ 
ket  shrank  a  little  more  last  week.  PC  con¬ 
nectivity  software  provider  NetManage 
announced  the  acquisition  of  its  one-time 
competitor,  the  troubled  Wall  Data. 

With  this  move,  NetManage  gets  Wall 
Data’s  10,000-strong  customer  base  as 
well  as  its  line  of  RUMBA  PC-to-host  soft¬ 
ware  products.  Wall  Data  had  recently 
launched  a  line  of  Java  and  ActiveX-based 
products  that  NetManage  felt  would  com¬ 
plement  its  own  ViewNow  host  connectiv¬ 
ity  and  thin-client  products. 

The  deal  was  valued  at  about  $94 
million. 

Intel  unwraps  faster  chipsets 

Intel  today  will  unveil  a  slew  of 
faster  chipsets  for  servers  that  allow  pro¬ 
cessing  from  a  low-end  600  MHz  to  a  high- 
end  733  MHz. 

Code-named  Coppermine  and  Cas¬ 
cades,  the  chipsets  use  new  .18-micron 
technology  and  a  133-MHz  system  bus, 
which  allows  the  servers  they  are  installed 
in  to  run  at  higher  rates  for  less  money. 
These  chipsets  will  replace  Intel’s  slower 
.25-micron  technology. 

Coppermine  chipsets  will  be  used  in 
Pentium  III  servers,  while  Cascades 
chipsets  will  be  installed  in  Pentium  III 
Xeon-based  servers. 

Hewlett-Packard,  Compaq  and  IBM  are 
expected  to  upgrade  their  servers  to  use 
the  faster  chipsets.  Only  Dell  has  a 
Coppermine-equipped  server  ready  today. 
The  Dell  PowerEdge  2400,  a  dual-proces¬ 
sor  Pentium  III  machine,  features  an 
embedded  network  adapter  and  RAID  con¬ 
troller,  as  well  as  high-availability  features, 
such  as  hot-pluggable  peripheral  bays, 
power  supplies  and  disk  drives. 


IBM  bolsters  wares  for 
mixed  NT-AS/400  nets 


Firm  will  let  users  attach  NT  machines  to  AS/400. 


BY  MARC  SONGINI 

SOMERS,  N.Y.  —  IBM  is 
juicing  up  the  capabilities  of 
its  mixed  Windows  NT- 
AS/400  systems. 

During  the  next  year,  the 
company  intends  to  enhance 
the  performance 
and  memory  of  its 
AS/400  Integrated 
Netfinity  Server 
card,  and  even  let 
users  attach  exter¬ 
nal  Windows  NT 
servers  to  the 
AS/400. 

This  will  allow 
users  to  run  high- 
end  NT  symmetri¬ 
cal  multiprocessing 
(SMP)  applications, 
such  as  enterprise 
resource  planning 
programs,  without 
sacrificing  the  bene¬ 
fits  of  the  integrated 
NT  AS/  400  system. 

Today  such  applica¬ 
tions  cannot  run  on 
the  card  alone. 

The  Integrated  Netfinity 
Server  card  fits  into  a  PCI  slot 
on  the  AS/400  and  exploits 
the  storage  and  power  of  that 
machine. 

The  card  has  an  Intel  chip 
and  a  copy  of  the  Windows 
NT  operating  system  and  can 
be  managed  as  a  part  of  the 
AS/400. 

Organizations  that  don’t 
want  to  learn  NT  skills  but 
like  some  of  that  operating 
system’s  features  find  the  card 
a  better  alternative  than  a 
stand-alone  NT  box,  says  IBM. 

Better  alternative 

But  the  external-server 
capability  makes  sense  for 
applications  that  will  only  run 
on  a  Windows  NT  box, 
according  to  Gary  Cornell, 
vice  president  of  IT  at  LDG 
Reinsurance  Corp.  in  Wake¬ 
field,  Mass. 

However,  Cornell  says  he  is 
currently  content  with  just 
his  server  cards.  His  company 
was  able  to  replace  a  half- 
dozen  NT  servers  with  three 
cards  sitting  on  one  AS/400, 


freeing  up  needed  space 
those  servers  had  been 
occupying. 

In  previous  years,  IT  shops 
used  the  NT  card  to  run  file 
and  print  applications  in 
their  AS/400  networks,  but  as 
NT  has  matured,  users  have 


expanded  the  applications 
they  are  running  on  the 
card,  necessitating  a  boost  in 
performance  and  memory, 
says  Ted  Scharf,  an  IBM  mar¬ 
keting  manager. 

More  memory 

Next  year,  IBM  intends  to 
increase  the  memory  on 
the  card  from  1G  byte  to 
4G  bytes  and  storage  from 
128M  bytes  to  multiple  tera¬ 
bytes,  he  says. 

Additionally,  the  current 
333-MHz  Intel  chip  will  be 
replaced  by  one  running  at 
speeds  as  high  as  600  MHz. 

Down  the  line,  the  com¬ 
pany  will  also  select  a 
Netfinity  model  that  can 
scale  to  two  or  more  CPUs 
and,  using  a  PCI  card,  allow 
it  to  attach  to  the  bus  of 
the  AS/400. 

The  box,  called  the  Ex¬ 
ternal  Integrated  Netfinity 
Server,  will  be  able  to  run 
applications  the  card  can’t 
handle,  custom-tailored  NT 
applications,  or  to  support 
thin  clients. 

See  IBM,  page  14 


IBM  is  prepping  a  faster  Netfinity  card  for 
customers  running  NT  applications  on 
AS/400s. 
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Nortel  buys  customer  relationship  firm  for  $2.1  billion 


BY  DAVID  ROHDE 

SAN  JOSE  —  Nortel  last  week 
ponied  up  another  couple  of  billion 
dollars  in  its  effort  to  bolster  integra¬ 
tion  between  telephony  call  centers 
and  Web-based  electronic  commerce. 

The  vendor  bought  Clarify,  the  No.  2 
maker  of  customer  relationship  man¬ 
agement  (CRM)  software.  Clarify  pro¬ 
duces  software  that  call  center  and 
help-desk  agents,  mobile  salespeople 
and  logistics  managers  use  to  consult 
and  update  customer  records  and 
assist  in  sales. 

Clarify  recently  bundled  its  software 
into  a  suite  called  eFrontOffice, 
which  attempts  to  provide  consistent 
sales-history  information  on  a  cus- 
tomer-by-customer  basis  to  agents  han¬ 
dling  both  e-commerce  and  telephony 
transactions. 


PROFILE:  CLARIFY^ 

Headquarters:  San  Jose 

Founded: 

Primary  business: 

1990 

Call  center 
products  and  sales 
support  application 
suites. 

Key  officers: 

Tony  Zingale,  president 
and  CEO;  Randy  Raynor, 

CTO 

1998  revenues: 

$130.5  million 

Employees: 

800 

Sales  channels: 

Direct  and  indirect 

Web  site: 

www.clarify.com 

The  $2.1  billion  purchase  follows 
Nortel’s  August  announcement  that  it 
would  acquire  Periphonics,  an  interac¬ 
tive  voice  response  vendor  that  also 
has  moved  into  the  arena  of  Web  call 
center  integration.  The  Clarify  deal  fol¬ 
lows  last  week’s  purchase  of  No.  3 
CRM  vendor  Vantive  by  enterprise  soft¬ 
ware  vendor  PeopleSoft. 

The  CRM  market  leader,  Siebel 
Systems,  remains  independent,  but  not 
without  a  partner  —  its  software  is 
resold  by  Lucent,  Nortel’s  neck- 
and-neck  competitor  for  call  center 
telephony  switches.  Bill  Conner,  execu¬ 
tive  vice  president  at  Nortel,  says 
Nortel  is  seeking  tighter  integration 
between  telephony  and  Web  technolo¬ 
gies  than  the  company  thought  was 
possible  through  a  reseller  agreement. 

Nortel’s  move  comes  at  a  huge  price 
—  almost  five  times  as  much  as 
PeopleSoft  paid  for  Vantive,  and  10 
times  Clarify’s  expected  revenue  for 
this  year.  Susan  King,  Nortel’s  vice  pres¬ 
ident  for  customer  care  solutions,  justi¬ 
fied  the  price  by  pointing  to  Clarify’s 
“solid  workflow  architecture’’  —  inte¬ 


gration  with  back-office  systems  is  con¬ 
sidered  key  to  CRM  installations  —  and 
work  in  both  telephony  and  e-com¬ 
merce  environments. 


Clarify  also  brings  Nortel  a  gold- 
plated  customer  list,  including 
Best  Buy,  British  Telecom,  Compaq, 
First  USA,  General  Electric,  Gillette 


and  Prudential. 

Clarify  will  become  a  wholly  owned 
Nortel  subsidiary'  with  headquarters  in 
San  Jose.  S 


A  PLANE  TO  LAND  SAFELY, 


A  CHILD  TO  EAT  LUNCH, 
A  DISEASE  TO  BE  CURED. 


UNTIL  YOU  SEE  WHAT 


After  a  decade  of  providing  advanced  network-enabling  technology 
for  industrial,  medical,  scientific  and  commercial  applications,  we 
can  undoubtedly  say  that  this  is  just  the  beginning. 


'  LANTStSWfX 

Today,  Lantronix  links  devices  to  the  networks  that  need  them.  From 

•V ■  -  .  vu-:; 

airport  runway  sensors  to  lunch  card  readers  to  blood  analyzers,  our  technology  has  enabled 
millions  of  devices  to  connect  directly  to  networks  and  the  Internet.  In  fact,  we  not  only  make  it 

•  ■  A',  ; 

possible  for  virtually  anything  to  connect  to  a  network  —  we  make  it  effortless.  •  :4ml 


As  the  next  millennium  approaches,  we  stand  ready  to  continue  our  tradition  of  vision  and  -M 

■  l . 

innovation.  At  Lantronix,  the  only  thing  more  important  than  what  we’ve  accomplished  to  date,  is 
what  we'll  accomplish  tomorrow.  ' 


it  our  website  at  www.lantronix.com  to  see  what  the  future  hold; 


Free  Product  info  enter  NWInfoXpress  #101  online  @  www.networkworld.com/infoxpress  . 

.  ■■  ■  . 


News 


SBC  pushes  toward  converged  net 


$6  billion  upgrade  should  mean  broadband  access  to  most  customers. 


BY  TIM  GREENE 
AND  DENISE 
PAPPALARDO 

SAN  ANTONIO,  TEXAS  — 
Most  customers  can  expect  IP 
voice  and  data  to  be  delivered 
over  a  single  line  once  SBC 
Communications  finishes  an 
ambitious  three-year,  $6  billion 
build-out  of  optical  fiber  in  its 
network. 


Announced  last  week,  the 
overhaul  features  fiber  to  the 
curb  that  will  enable  broad¬ 
band  access  to  80%  of  SBC’s 
customers  via  digital  sub¬ 
scriber  line  (DSL).The  network 
backbone  will  be  converted  to 
ATM,  making  it  possible  for  the 
company  to  run  voice  and  data 
over  a  single  infrastructure  and 
ensure  quality  of  service. 

Dubbed  Project  Pronto,  the 
plan  will  make  it  possible  for 
80%  of  SBC  customers  to  get 
1.5M  bit/sec  DSL  downloads 
over  regular  copper  phone 
lines,  while  60%  will  be  able 
to  get  7M  bit/sec  downloads. 
The  same  circuits  will  support 
multiple  packet-voice  chan¬ 
nels  simultaneously.  In  addi¬ 
tion,  100,000  T-l  lines  that 
require  expensive  repeaters 
will  be  replaced  with  fiber, 
making  the  lines  less  expen¬ 
sive  to  maintain.  The  move 
will  also  make  it  easier  to  turn 
up  more  bandwidth  for  SBC’s 
customers. 

Project  Pronto  will  cut  SBC 
operating  expenses  to  such  a 
degree  that  the  $6  billion 
build-out  cost  will  be  offset, 


SBC  says.  But  the  company  has 
made  no  commitment  to  pass 
along  those  savings  to  cus¬ 
tomers. 

Some  users  think  the 
upgrade  will  mean  better  data 
services  down  the  road,  after 
SBC  gets  permission  to  sell 
long-distance  services  in  its 
region,  which  includes  SBC’s 
original  territory  plus  Pacific 
Bell’s  and  Ameritech’s  areas. 


The  company  also  owns 
Southern  New  England  Tele¬ 
phone  in  Connecticut. 

“The  SBC-Ameritech  area  is 
huge  now,”  says  Mort  Rahimi, 
vice  president  of  IT  at 
Northwestern  University  in 
Chicago.  “If  they  build  very 
high-speed  networks  to  pro¬ 
vide  connections  in-region  and 
they  have  holdings  on  the  East 
and  West  Coasts,  that  will  make 
them  one  of  the  top  compa¬ 
nies  to  work  with.” 

SBC  has  the  potential  to  be  a 
top-tier  carrier  among  the 
ranks  of  AT&T  and  WorldCom, 
but  it  will  have  to  develop 
compelling  products  and  pric¬ 
ing  to  keep  from  losing  cus¬ 
tomers,  he  says. 

“Their  No.  1  issue  is  tying 
down  customers,”  Rahimi  says. 
“Once  you  lose  them,  it’s  very 
hard  to  get  them  back.The  has¬ 
sle  of  changing  is  too  much  to 
make  me  change  unless  there 
is  a  huge  difference.” 

SBC’s  strategy  parallels  that 
of  AT&T,  which  is  committed  to 
offering  widespread  broadband 
services  and  voice.  The  differ¬ 
ence  is  that  AT&T  will  use  cable 


networks  rather  than  DSL. 

Voice  over  DSL  is  a  daring 
move  because  it  will  directly 
compete  with  SBC’s  existing 
voice  services.  But  in  areas 
where  copper  phone  lines  are 
running  out  —  such  as  parts  of 
California  —  voice  over  DSL 
could  be  a  less  expensive  way 
to  set  up  additional  phone 
lines,  says  Claudia  Bacco,  an 
analyst  at  TeleChoice,  a  tele¬ 
com  market  research  firm  in 
Boston. 

Meanwhile,  SBC  needs  help 
to  extend  its  local  network 
beyond  its  current  home  area, 
SBC  Chairman  Edward  Whit- 
acre  says.  The  company  agreed 
to  sell  local  service  in  30  cities 
outside  its  home  territory  as 
part  of  a  deal  to  win  Federal 
Communications  Commission 
permission  to  buy  Ameritech. 
Whitacre  says  that  SBC  will 
likely  acquire  another  compa¬ 
ny  to  help  it  meet  that 
obligation. 

The  company  also  needs  to 
clean  up  its  hodgepodge  of 
wireless  holdings  and  settle 
on  a  single  wireless  technolo¬ 
gy  so  its  customers  can  roam 
without  losing  service.  SBC’s 
many  acquisitions  have  given 
it  traditional  analog  cellular, 
digital  cellular,  global  system 
for  mobile  communications 
(GSM)  and  Code  Division 
Multiple  Access  personal  com¬ 
munications  service  (PCS) 
wireless  networks. 

That  means  a  customer  in 
California  who  signs  up  for 
PacBell’s  GSM-based  PCS  ser¬ 
vice  cannot  roam  to  SBC’s  ana¬ 
log  cellular  networks,  says 
Michael  King,  research  analyst 
at  Meta  Group,  a  consulting 
firm  in  Stamford,  Conn. 

It  would  make  sense  for  SBC 
to  acquire  VoiceStream  Wire¬ 
less,  a  GSM  provider,  says  Bob 
Egan,  research  director  at  the 
Gartner  Group,  a  Stamford, 
Conn.,  consulting  firm. 

VoiceStream  is  in  the  proc¬ 
ess  of  acquiring  OmniPoint 
Communications,  another  GSM 
wireless  service  provider, 
which  could  provide  SBC  with 
GSM  coverage  throughout  the 
Midwest  and  in  key  markets 
such  as  New  York  and  Seattle, 
Egan  says.  The  company  would 
presumably  get  rid  of  its  non- 
GSM  holdings.  01 


SBC  adds  fiber  to  its  network 


With  a  $6  billion  investment  by  SBC  to  put  optical  fiber  closer 
to  customers  and  ATM  in  its  core  network,  customers  can 
expect  converged  voice,  video  and  data  services. 

•  DSL  at  guaranteed  1.5M  bit/sec  downloads. 

•  Multiple  voice  channels  on  the  same  line  with  data. 

•  ATM  for  service-quality  guarantees  and  more  efficient  trunking. 


SBC  Network 
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DSL  carrying  voice, 
video  and  data 
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XML  has  busy  week 


BY  ELLEN  MESSMER 

By  announcing  this  week 
that  it  will  use  XML  to  simplify 
the  exchange  of  documents 
with  its  trading  partners,  Dell 
will  become  one  of  the  first 
big  companies  to  put  the  new 
technology  to  the  test. 

But  in  spite  of  this  vote  of 
confidence,  XML  still  has  plenty 
to  prove.  In  fact,  RosettaNet,  the 
high-tech  industry  group  defin¬ 
ing  more  than  100  common 
XML-based  business  forms  and 
processes  for  use  by  its  mem¬ 
bers,  last  week  acknowledged  it 
has  essentially  scrapped  a  year’s 
worth  of  work  and  is  redoing 
the  forms  and  processes. 

XML  is  a  standard  for  pro¬ 
gramming  metatags  in  elec¬ 
tronic  documents  so  comput¬ 
ers  can  convert  content  into 
any  number  of  formats.  The 
technology  has  begun  to  show 
up  in  a  growing  number  of 
server  products  from  big 
names,  such  as  Microsoft,  and 
relative  unknowns,  such  as 
WebMethods  and  Extricity. 

Dell  has  high  hopes  the 
technology  will  be  a  big 
improvement  over  traditional 
electronic  data  interchange 
for  electronic  commerce  and 
other  electronic  business. 

“XML  will  allow  us  to  take 
the  agnostic  approach, 
whether  our  customer  is  using 
SAR  Ariba  or  EDI,”  says  John 


to  send  XML  documents  to 
Dell. The  trading  partner  would 
need  to  pay  about  $15,000  for 
the  software  and  training. 

The  high-tech  industry  is 
excited  about  XML.  Dozens  of 
electronics  and  semiconductor 
firms,  including  Intel,  set  up  the 
RosettaNet  consortium  about 
two  years  ago  to  develop  XML- 
based  business  forms  and 
processes.  The  group  has  over¬ 
seen  interoperability  testing  — 
dubbed  eConcert  —  between 
different  vendors’  XML-capable 
servers  using  the  RosettaNet 
XML  document  definitions. 
Consortium  members  hope  to 
have  XML  systems  based  on 
RosettaNet  definitions  in  place 
by  February. 

Guy  Abramo,  a  marketing 
executive  at  RosettaNet  mem¬ 
ber  Ingram-Micro,  last  week 
called  the  RosettaNet  stan¬ 
dards  a  critical  factor  in  the 
distributor’s  effort  to  compete 
with  competitors  selling  prod¬ 
ucts  via  the  Web.  He  also  says 
XML  technology  is  less  expen¬ 
sive  than  EDI  technology. 

But  last  week,  RosettaNet 
members  said  the  consortium 
is  ditching  Version  1.0  of  its 
XML  document  types  and 
processes. Version  1 .0  involved 
wrapping  EDI  code  in  XML 
wrappers. 

“It  was  a  shortcut,  but  not 
necessarily  where  we  want  to 
be,”  explains  Phillip  Merrick, 


XML  efforts 

Different  ways  to  put  XML  to  work  in  e-commerce: 

cXML.  Commerce  XML  is  a  set  of  document  type  definitions  (DTD)  developed 
by  Ariba  for  purchase  orders  and  other  documents. 

BizTalk.  Document  types  and  procedures  under  development  by  Microsoft, 
with  voluntary  submissions  from  vendors  posted  at  www.biztalk.org. 

RosettaNet.  A  set  of  more  than  100  DTDs  and  business  process  interactions 
under  development  by  the  high-tech  industry. 


Winfrey,  Dell’s  e-commerce 
program  manager. 

Dell  has  installed  Web- 
Methods’  XML-based  B2B 
application  server  software, 
which  can  convert  documents 
into  XML  and  back. 

If  a  trading  partner  doesn’t 
have  a  way  to  send  documents 
as  XML,  Dell  will  go  to  the  part¬ 
ner’s  site  and  install 
WebMethods’  B2B  for  Partners, 
a  scaled-down  version  of  the 
B2B  product  that  can  be  used 


WebMethods’  president  and 
CEO. 

RosettaNet  is  now  working 
on  what  it  calls  XML  Schemas, 
pure  XML  document  types  that 
are  dense  with  metatags, 
which  can  perform  tasks  such 
as  ensure  that  a  document  has 
been  fully  filled  in.  RosettaNet 
members  and  observers  say 
the  technical  disruption 
should  not  prevent  the  group 
from  reaching  its  February 
goal.  3 


8  Network  World  October  25,  1  999  www.nwfusion.com 


at 


m* 


*  * 


Adding  storage  can  mean  a  Few  Late  nights 
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HP  just  made  it  a  day  job. 


Wouldn’t  it  be  great  if  you  could 
offer  your  customers  safe,  secure 
disk  storage  that  was  simple  and 
quick  to  install?  HP  has  the  solution: 
The  HP  SureStore  HD  Server  4000. 
This  breakthrough  Network  Attached 
Storage  (NAS)  device  allows  customers 
to  add  safe,  secure  disk  storage 
directly  to  a  Windows  NT®  network 
in  just  minutes — any  time,  any  day. 


For  a  limited  time,  we’re  offering 
qualified  HP  resellers  the  opportunity 
to  purchase  an  HP  SureStore  HD  Server 
4000  demo  unit  at  a  55%  discount 
off  list  price.  See  for  yourself  how  easy 
it  is  to  install  and  use.  Once  you  do, 
you’ll  want  to  share  this  breakthrough 
in  network  storage  with  your  customers. 
And  you’ll  discover  that  HP’s  Network 
Attached  Storage  Solutions  are  just 
as  easy  to  sell  as  they  are  to  install 
and  use. 


The  quickest  and  easiest  way 
to  add  storage  to  your  network. 

To  qualify  for  your  demo  unit  and  get  complete  information 
on  HP’s  Network  Attached  Storage  solutions,  visit: 
http://hpstoragesoiutions.com/NA5Demo/ 

®1999  Hewlett-Packard  Company. 


Thai  HEWLETT 
mLrJk  PACKARD 

[  Expanding  Possibilities 


Windows  NT  is  o  US  registered  trademark  of  Microsoft  Corporation 
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ClickNet  develops  hacker  detection  product 


BY  ELLEN  MESSMER 

SAN  JOSE  —  Desktop  man¬ 
agement  vendor  ClickNet 
Software  is  jumping  into  the 
security  field  with  a  product 
called  Entercept  that  detects 
and  prevents  hacker  attempts 
on  servers  and  PCs. 

Entercept  seeks  to  prevent 
hacker  activity  through  host- 
based  server  and  desktop 
“agent”  software  that  observes 
each  request  made  to  the  oper¬ 
ating  system  and  checks  to  see 
if  it's  legitimate  by  comparing  it 
to  a  list  of  known  “attack  signa¬ 
tures.”  The  NT-based  Entercept 


console  can  institute  a  security 
policy  for  up  to  1 ,000  of  these 
software  agents  and  generate 
alerts  if  trouble  is  detected. 

ClickNet  didn’t  develop  the 
Entercept  product  but  rather 
bought  it  by  acquiring  Israeli- 
based  start-up  Corekt  earlier 
this  year  for  an  undisclosed 
price,  acknowledges  Christo¬ 
pher  Tomlinson,  ClickNet 's  vice 
president  of  marketing. 

“Corekt  was  still  in  the 
research  phase,  and  their  15 
security  experts  join  our  staff,” 
Tomlinson  says.  ClickNet  will 
continue  marketing  its  tradi¬ 
tional  desktop  management 


software,  but  the  firm  wants  to 
remake  itself  into  a  security 
firm,  he  adds.  The  reason?  “The 
growth  in  the  security  market,” 
says  Tomlinson,  citing  an  Inter¬ 
national  Data  Corp.  report  pre¬ 
dicting  that  the  $2  billion  mar¬ 
ket  will  triple  in  three  years. 

Can  a  5-year-old  privately 
held  firm  such  as  ClickNet, 
without  known  security  ex¬ 
pertise,  convince  the  corpo¬ 
rate  world  to  give  it  a  chance? 
Aberdeen  Group  analyst  Eric 
Hemmendinger  is  ready  to 
give  the  firm  the  benefit  of  the 
doubt.  “A  company  that  has  a 
history  already  and  knows 


how  to  run  a  business  proba¬ 
bly  has  a  leg  up  on  a  start-up 
that’s  unknown,”  he  says. 

The  Entercept  product  will 
be  formally  unveiled  in  mid- 
November.  A  few  companies, 
including  EMC,  say  they  are 
preparing  to  beta  test  it. 

Entercept  will  ship  with  NT 
and  Solaris  agent  software  that 
can  evaluate  every  incoming 
request  for  system  resources, 
such  as  opening  a  file,  read- 
write,  or  a  request  to  access  a 
device.  The  user  names  and 
privileges  are  defined  by  the  NT 
domain  controller  in  the  NT- 
based  Entercept  console,  says 


Oace  Dada,  senior  product  man¬ 
ager  for  security  at  ClickNet. 

At  present,  Entercept  knows 
about  300  types  of  attacks,  such 
as  buffer  overflows  and  Trojan 
horses  like  BackOrifice.As  new 
attacks  are  identified,  the  Enter¬ 
cept  console  can  download 
them  in  encrypted  fashion  from 
the  clicknet.com  Web  site.  The 
agent  software  can  communi¬ 
cate  with  the  Entercept  console 
every  30  seconds  as  a  default 
setting  to  get  the  attack  signa¬ 
ture  updates.  If  the  agent  soft¬ 
ware  on  the  server  sees  an 
attack,  it  can  terminate  the  ses¬ 
sion,  log  it  or  send  an  alert. 

The  Entercept  console  will 
cost  $5,000,  with  server  agents 
costing  $1,000  and  desktop 
agents  $95  each. 

ClickNet:  www.clicknet.com 


VLANs, 

continued  from  page  1 

46%  of  IT  organizations  plan 
to  implement  VLANs  by 
November  2000.  The  num¬ 
ber  jumps  to  60%  for  compa¬ 
nies  with  more  than  1,000 
employees. 

“[IEEE]  802.  IQ 
definitely  helped 
spur  this  growth,” 
says  Mike  McCon¬ 
nell,  director  of 
LANs  and  network 
management  at  San 
Jose-based  Info- 
netics.  “We  used  to 
see  a  two-years-out’ 
mentality,  but  end 
users  are  deploying 
now  that  the  tech¬ 
nology  is  maturing.” 

IEEE  802.  IQ  is 
even  taking  some  of 
the  steam  out  of 
ATM  in  the  campus, 
according  to  Mike  Myrick, 
manager  of  technology  ser¬ 
vices  at  the  University  of 
Mississippi.  One  of  ATM’s 
strengths  is  support  for 
VLANs,  but  now  Ethernet 
easily  fulfills  that  function. 

IEEE  802.  IQ  specifies  how 
VLANs  can  be  created  by 
grouping  switch  ports  into  vir¬ 
tual  LANs,  but  vendors  have 
also  enabled  customers  to  cre¬ 
ate  VLANs  based  on  the  proto¬ 
col  —  such  as  IP  or  IPX  — 
being  carried. 

The  problem  is,  protocol- 
based  VIAN  support  is  partic¬ 
ular  to  each  vendor.  The  IEEE 
is  now  trying  to  standardize 
the  approach  in  an  effort 
dubbed  802.lv.  The  802.lv 
work  has  just  begun,  but  the 


group  hopes  to  make  substan¬ 
tial  progress  by  the  middle  of 
next  year,  says  Andrew  Smith, 
software  architect  at  Extreme 
Networks  and  project  editor 
of  802.lv. 

Lockheed  Martin  uses  pro¬ 
prietary  protocol-based  VLANs, 
mainly  to  send  DECnet  and  IP 


traffic  through  the  same  switch 
port,  while  keeping  the 
DECnet  traffic  logically  sepa¬ 
rate,  says  Joe  Anderson,  lead 
member  of  the  engineering 
staff. “DECnet  is  very  broadcast- 
intensive,”  Anderson  says. 
“Everybody  on  the  IP  subnet 
doesn’t  want  to  hear  the 
DECnet  traffic.” 

Because  802.lv  is  still  in  its 
infancy,  protocol-based  VLANs 
are  still  proprietary,  but 
802. IQ  provides  a  way  for 
the  VLANs  to  connect. 
Lockheed  Martin  is  using 
802.  IQ  to  create  a  trunk 
between  proprietary  VLANs 
supported  by  its  Xylan  and 
Hewlett-Packard  switches. 

Another  extension  under 
consideration  is  making  span- 


Mixed  bag 

There  are  pros  and  cons  to  VLAN  tech¬ 
nology,  according  to  current  users. 

The  case  for  VLANs: 

•  Make  it  easy  to  add,  move  and  change  users. 

•  Organize  users  by  priority  or  protocol. 

•  Limit  broadcast  traffic. 

The  case  against  VLANs: 

•  Can  eat  up  backbone  bandwidth. 

•  Often  make  spanning  tree  impractical. 

•  Are  often  unnecessary. 


ning  tree  sensitive  to  VLANs, 
Extreme’s  Smith  says.  A  pro¬ 
ject  called  802.1s  provides 
for  a  scenario  in  which  a 
user  could  have  two  re¬ 
dundant  paths,  or  spanning 
trees,  through  a  network, 
each  supporting  several 
VLANs  and  using  as  much 
bandwidth  as  needed. 

If  one  path  failed,  802.1s 
would  make  it  possible  to  eas¬ 
ily  shift  all  those  VLANs  to  the 
surviving  path.  Smith  says  the 
technical  details  are  com¬ 
plete,  and  802.1s  is  undergo¬ 
ing  a  working-group  ballot 
right  now. 

On  the  management  side, 
the  IETF  in  August  published  a 
proposed  standard  that  spells 
out  how  management  software 
can  set  up  and  manage  VLANs 
on  different  vendors’  equip¬ 
ment.  Cabletron’s  Spectrum 
business  unit,  which  focuses  on 
network  management,  is  cham¬ 
pioning  RFC  2674. 

But  at  this  point,  Cabletron 
is  the  only  major  vendor  sup¬ 
porting  the  proposed  stan¬ 
dard  in  its  switches.  3Com 
says  it  will  support  RFC  2674 
in  its  CoreBuilder  switches 
next  year. 

Extreme,  even  though  it  co¬ 
authored  the  document, 
wouldn’t  say  when  it  will  offer 
support.  Nortel  Networks  says 
it  is  waiting  for  user  demand 
for  the  support.  And  Cisco  says 
it  will  wait  until  after  the  RFC 
reaches  draft  standard  status, 
which  is  expected  to  happen 
next  year.  3 
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THE  DEBATE  OVER  VLANS 


Virtual  LAN  technology  has  gone  through  a  transformation 
over  the  past  few  years,  and  the  industry  remains  split  over 
whether  the  technology  is  really  necessary. 

A  VLAN  acts  like  an  ordinary  LAN,  but  connected 
devices  don't  have  to  be  physically  connected  to  the  same  seg¬ 
ment.  Even  though  clients  and  servers  may  be  located  anywhere 
on  an  interconnected  network,  they  are  grouped  together  in  a 
VLAN,  and  broadcasts  are  transmitted  to  all  the  endstations  within 
the  VLAN. 

VLAN  technology  endured  the  media  cycle  that  all  hot  technolo¬ 
gies  go  through.  There  was  a  period  of  hype  followed  by  the 
inevitable  backlash.  Now,  some  believe,  the  technology  is  ready  for 
implementation. 

But  there  are  still  some  who  have  reservations.  VLANs  were 
created  to  get  around  slow  routers,  and  they  are,  therefore,  a  solu¬ 
tion  to  a  problem  that  no  longer  exists,  says  Dave  Passmore, 
research  director  at  NetReference.  Putting  two  endstations  on  the 
same  VLAN  means  you  don’t  have  to  route  between  them,  even  if 
they  are  on  different  physical  LANs. 

In  an  age  of  processor-based  routers,  it  made  sense  to  avoid 
routing.  But  with  today's  Layer  3  switches,  which  route  at  wire- 
speed,  this  requirement  goes  away,  Passmore  says.  VLANs,  the  ar¬ 
gument  goes,  are  just  adding  an  unnecessary  layer  of  complexity. 

Others  argue  that  VLANs  are  useful  because  they  limit  broad¬ 
casts  on  large,  flat  switched  networks.  Plus,  the  ability  to  add, 
move  and  change  users  on  a  network  purely  through  software  is 
still  a  benefit  of  the  technology,  says  Patrick  Kelly,  director  of  prod¬ 
uct  management  at  Cabletron. 

VLANs  also  become  important  as  users  start  to  assign  prioriti¬ 
zation  to  different  types  of  traffic.  End  users  grouped  in  the  same 
VLAN  can  be  assigned  the  same  priority. 

Even  Passmore  acknowledges  that  there  are  some  instances 
in  which  users  may  want  to  keep  traffic  separated  through 
VLANs.  For  example,  an  application  service  provider,  which  sup¬ 
ports  multiple  customers  on  the  same  gear,  may  want  to  keep 
them  logically  separate  in  this  way. 

—  Jeff  Caruso 


10  Network  World  October  25,  1  999  www.nwfusion.com 


How  can  you  be  certain  you're  getting 
frame  relay  and  ATM  services  from 


the  most  reliable 
your  carrier? 


Q 


Free  Infonetics  White  Paper  "Cost  of  WAN  Downtime' 


www.visualnetworks.com/nw 


Visual 

¥  NETWORKS® 


THE  WAN  SERVICE  LEVEL  MANAGEMENT  LEADER. 

Cl 999  Visual  Networks,  Inc.  Visual  Networks  is  a  registered  trademark  of  Visual  Networks. 


Free  Product  info  enter  NWInfoXpress  #111  online  @  www.networkworld.com/infoxpress 


‘  .■;'■•■' jgggBjfc 


.  *«j»  •  /  •  ■  •»--'•  -  .  ■  <  ■■  »'•"  •>» 


I  Seeing  through 
certain  environments 

vision 


:*:;i 


FLUKE 


This  is  what  you  need 
to  control  switched 
environments. 


A  few  years  ago,  a  protocol 
analyzer  gave  you  total  network 
visibility.  But  then  switched  net¬ 
works  came  along  and  left  you  in 
the  dark. 

That's  why  we  developed  our  new 
Switch  Vision  Suite.  It's  a  powerful 
package  of  visionary  network  man¬ 
agement  products  that  work  together 
to  monitor,  analyze  and  troubleshoot 
to  give  you  control  of  every  situation 
that  pops  up.  You  get  enterprise¬ 
wide  vision  with  the  power  to  drill 
down  seven  layers  deep.  All  for 
about  the  same  price  as  the  leading 
protocol  analyzer. 

For  starters,  our  Network  Inspector™ 
software  monitors  and  trends  all  the 
ports  in  your  switched  network.  Our 
new  Trace  SwitchRoute™  feature 
pinpoints  problems  between  nodes. 


Switch  Vision  Suite 


Need  documentation?  With  a  single 
click,  you  can  generate  spanning 
tree  and  switched  server  connection 
diagrams  with  our  unique  link  to 
Visio®  software.  And  if  a  key  device, 
router,  or  switch  port  is  overloaded, 
you'll  know  about  it  in  a  heartbeat. 

Then,  put  our  LANMeter®  with 
SwitchWizard™  to  work.  It's  the 
fastest  way  to  find  problems  in 
switched  networks.  In  seconds,  it 
can  zero  in  on  the  problem  and  give 
you  detailed  error  information  -  from 
anywhere  in  the  network.  You  can 


even  drill  down  to  the 
physical  layer  to  isolate  a 
bad  cable  or  a  NIC.  Or  use  it 
as  a  remote  probe  to  feed  data 
back  to  the  Network  Inspector 
console. 

Finally,  illuminate  problems 
through  the  application  layer  with 
our  Protocol  Inspector™.  You'll  have 
the  power  of  full  seven-layer  de¬ 
codes  with  expert  analysis.  Ad¬ 
vanced  filtering  and  triggering  let 
you  find  offending  packets  in  what¬ 
ever  dark  corner  they  may  be  lurk¬ 
ing. 

The  Switch  Vision  Suite  from 
Fluke.  It  gives  you  the  power  to  see 
inside  switched  environments.  And 
in  today's  world  that's  what  being  in 
control  is  all  about  -  better  vision. 


Fluke.  Keeping  your  world 
up  and  running. 


For  the  complete  story,  visit  our  web  site  at 
www.nuke.com/nettooIs/switchvision. 

Or  better  yet,  see  for  yourself,  in  action. 

Call  1-888-819-2487  and  we'll  come 
out  and  show  you  how  much  it  can  do 
in  your  own  switched  environment. 


Network  Inspector  now  works  with  Visio. 
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News 


Wiretap, 

continued  from  page  1 
over  the  ’Net. 

Network  managers  say  any 
hole  built  into  the  Internet  for 
legitimate  law  enforcement 
purposes  would  be  abused 
by  hackers,  and  the  existence 
of  such  a  hole  could  under¬ 
mine  consumer  confidence 
in  the  Internet  and  slow 
the  growth  of  electronic 
commerce. 

“This  proposal  would  be 
a  big  worry,”  says  Chris 
Kozlov,  network  administrator 
for  Arlington  Industries,  a 
Libertyville,  Ill  -based  distri¬ 
butor  of  imaging  supplies  that 
accepts  online  purchases 
via  credit  card.  “Security  is 
very  important  to  our  busi¬ 
ness  because  it’s  extremely 
important  to  our  customers. . . . 
If  you’re  putting  in  a  back 
door  to  the  Internet,  some¬ 
body  is  going  to  eventually 
find  it  that  isn’t  in  law 


l 


Upshot 


The  issue  of  whether 
wiretapping  capabilities 
should  be  built  into  the 
Internet  will  heat  up  at  the 
November  IETF  meeting  in 
Washington,  D.C. 

Regardless  of  what  the 
IETF  decides,  corporate 
network  managers  could 
find  themselves  in  the  posi¬ 
tion  of  having  to  help  the 
feds  with  wiretaps. 

Another  concern  is  that 
the  cost  of  converged  net¬ 
work  gear  could  rise  as  a 
result  of  wiretapping  capa¬ 
bilities  being  built  in. 


system.  I  want  it  to  be  diffi¬ 
cult,”  says  Dwight  Gibbs,  chief 
technical  fool  at  The  Motley 
Fool,  an  Alexandria,  Va.-based 
Web  site  that  features  invest¬ 
ment  advice.  “We  give  all 
of  our  information  away  for 
free  .  .  .  but  we  do  have  some 
stuff  we  would  like  to  keep 
private.” 

The  issue  of  whether  a 
wiretapping  capability  should 
be  built  into  the  Internet 
promises  to  be  the  hottest 
topic  at  the  next  Internet 
Engineering  Task  Force  (IETF) 
meeting,  which  will  be  held 
in  Washington,  DC.  in 
November. 

Since  the  issue  was  put  on 
the  meeting  agenda  several 
days  ago,  e-mails  have  been 
flying  between  IETF  mem¬ 
bers,  many  of  who  oppose  the 
idea. 


enforcement.” 

“I  don’t  want  it  to  be  easier 
for  someone  to  hack  into  my 


Work  sparks  debate 

The  wiretapping  debate 
emerged  from  the  IETF’s 
work  on  protocols  to  support 


combined  voice  and  data 
switches  to  carriers  unless 
the  switches  support  wiretap¬ 
ping.  The  members  want  to 
build  wiretap  support  into  a 
gateway  protocol  that  con¬ 
verts  voice  traffic  into 
Internet  data  packets. 

The  IETF’s  leadership 
decided  to  put  the  issue 
before  the  entire  organization 
to  determine  if  there  is  a 
consensus. 

IETF  Chair  Fred  Baker  says 
the  wiretap  proposal  would 
affect  more  than  voice  com¬ 
munications  over  the  Internet. 

“If  I  can  tap  voice  commu¬ 
nications,  I  can  tap  anything,” 
he  says.  “I  can  tap  keystrokes. 
I  can  tap  files  that  are  down¬ 
loaded.  The  capability  would 
wind  up  being  used  for  all 
sorts  of  interceptions.” 

Baker  is  against  the  proposal. 

“I  don’t  think  it’s  necessary 
to  have  anything  in  the  pro¬ 
tocols  to  support  wiretap¬ 
ping,”  he  says,  adding  that 
network  sniffing  equipment 


more  frequently.  When  commu¬ 
nications  are  encrypted  over 
the  ’Net,  carriers  can’t  inter¬ 
cept  them,  so  the  burden  of 
supporting  wiretaps  is  on  the 
organization  that  is  sending  or 
receiving  the  information. 

“Today,  corporate  network 
managers  are  not  required  by 
federal  statute  to  help  sup¬ 
port  wiretapping,”  says  Scott 
Bradner,  director  of  the  IETF’s 
transport  area  and  initiator  of 
the  wiretapping  debate. 
Bradner  predicts  that  in  the 
future,  when  voice,  data  and 
video  are  all  sent  over  the 
Internet,  network  managers 
“may  be  asked  by  the  legal 
powers  that  be  to  provide 
unencrypted  data.” 

Liability  concerns 

The  issue  of  liability  for 
wiretapping  may  influence 
the  type  of  encryption  that 
corporate  network  managers 
buy.  If  encryption  occurs  at 
the  desktop,  the  network 
manager  can’t  intercept  the 


"If  I  can  tap  voice  communications, 

I  can  tap  anything _ The  capability 

would  wind  up  being  used  for  all 
sorts  of  interceptions." 


Fred  Baker,  chair,  IETF 


IBM, 

continued  from  page  6 

However,  the  external 
server  will  still  be  manage¬ 
able  with  AS/400  tools,  and 
will  have  greater  reliability 
than  typical  NT  servers  be¬ 
cause  it  will  depend  in  part 
on  the  AS/400’s  more  ad¬ 
vanced  architecture. 

Several  advantages 

Among  the  advantages  of 
the  integrated  external  server 
is  that  it  will  have  native 
AS/400  features,  such  as  disk 
mirroring  and  backup  and 
activities  management. 

The  external  server  will 
also  be  manageable  with 
Tivoli’s  IT  Director. 

There  will  also  be  a  range 


This  week's  question: 


What  does  the  acronym 
MAE  stand  for  in  MAE 
East  and  MAE  West? 


of  Netfinity  applications  that 
can  be  run  on  the  external 
server,  such  as  one  that  con¬ 
trols  faxing. 

Previously,  NT  card  users 
had  to  rely  on  the  AS/400 ’s 
faxing  tool,  Scharf  says.  In 
addition,  IBM  is  looking  at 
ways  to  cluster  the  external 
NT  servers  for  greater  scala¬ 
bility  and  failover. 

Users  can  also  write  cus¬ 
tom  code  to  tie  together 
Windows  NT  and  AS/400 
applications.  For  instance,  a 
Microsoft  Exchange  program 
could  be  tweaked  to  share 
data  with  a  custom-written 
AS/400  business  application, 
Scharf  says. 

That  ability  particularly 
appeals  to  LDG’s  Cornell.  He 
says  the  stand-alone  server 
could  hypothetically  be  used 
to  house  his  company’s  DB2 
data  warehousing  application 
and  could  be  tied  together  on 
the  application  level  with  the 
AS/400. 

This  would  permit  high¬ 
speed  connections  between 
the  two  operating  systems 
without  having  to  go  through 
the  network,  he  says. 

The  upgraded  Integrated 
Netfinity  Server  card  will  be 
available  early  next  year.  The 
connector  card  and  external 
server  will  be  available  some¬ 
time  in  the  second  half  of 
2000. 

Pricing  has  yet  to  be  deter¬ 
mined.  □ 


telephony  over  the  Internet.  A 
wiretapping  capability  is  built 
into  central  office  telephone 
switches,  and  various  coun¬ 
tries,  including  the  U.S., 
require  carriers  to  intercept 
or  report  on  communications 
at  the  request  of  government 
agencies.  At  issue  is  whether 
these  requirements  will  apply 
to  voice  communications 
over  the  Internet. 

There  is  no  specific  pro¬ 
posal  coming  from  the  U.S. 
government  requiring  carri¬ 
ers  to  support  wiretapping 
over  the  Internet.  However, 
there  is  an  existing  law  —  the 
Communications  Assistance 
for  Law  Enforcement  Act  of 
1994  (CALEA)  —  that  re¬ 
quires  carriers  to  have  wire¬ 
tapping  capabilities  built  into 
the  phone  system  and  fines 
them  $10,000  per  day  if  they 
don’t  comply.  Carriers  are 
afraid  that  CALEA  will  apply 
to  voice  over  IP. 

Several  IETF  members  who 
work  for  companies  that  man¬ 
ufacture  telephone  switches 
fear  they  won’t  be  able  to  sell 


works  fine.  “All  it  would  take 
[to  intercept  voice-over-IP 
conversations]  is  to  open  up 
a  tunnel  to  the  router  .  .  . 
and  then  put  in  some  kind  of 
filter  [like  a  sniffer]  to  see  the 
traffic  and  fire  a  copy  of  it 
down  this  tunnel  to  some¬ 
where  else.” 

Also  opposed  to  the  idea  is 
Keith  Moore,  director  of  the 
IETF’s  applications  area. 
Moore  argues  that  the  IETF  is 
an  international  organization 
and  shouldn’t  be  concerned 
about  wiretapping  laws  in 
particular  countries. 

“The  IETF  has  traditionally 
insisted  on  good  security  in 
its  protocols  despite  the  insis¬ 
tence  by  some  in  government 
and  law  enforcement  that 
they  need  to  be  able  to  eaves¬ 
drop  on  network  communica¬ 
tions,”  he  says. 

Helping  the  feds? 

Regardless  of  how  the  IETF 
votes  on  this  proposal,  network 
managers  who  employ  encryp¬ 
tion  may  end  up  supporting 
wiretaps  of  Internet  traffic 


communication.  But  if  en¬ 
cryption  occurs  at  a  device 
on  the  edge  of  the  network, 
the  network  manager  can 
intercept  the  communication 
on  its  way  to  the  desktop. 

“If  I  could  encrypt  every¬ 
thing  that  came  in  and  out  of 
the  company,  I  would,” 
Arlington  Industries’  Kozlov 
says. 

The  company  already 
encrypts  employee  e-mail,  as 
well  as  purchase  orders  that 
come  in  over  the  ’Net. 

“The  whole  idea  behind 
encryption  is  to  prevent  peo¬ 
ple  from  looking  at  informa¬ 
tion. What  would  be  the  point 
if  wiretapping  were  built  into 
the  Internet?”  he  asks. 

Another  concern  for  net¬ 
work  managers  is  that  the 
cost  of  combined  voice  and 
data  equipment  is  likely  to 
rise  if  wiretapping  capabili¬ 
ties  are  built  in. 

“It  doesn’t  seem  reasonable 
to  require  everyone  to  build 
wiretapping  into  their  equip¬ 
ment,  which  is  going  to  in¬ 
crease  costs,”  Moore  says.  B 
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Internet  pioneer:  IPv6  transition  needed 
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The 

Internet 
engineering 
community 
is  promot¬ 
ing  a  new  version  of  the 
Internet  Protocol  —  Ver¬ 
sion  6  —  as  the  answer  to 
the  address  shortage  pre¬ 
dicted  for  the  current  Ver¬ 
sion  4.  IPv6  offers  enough 
addresses  that  every  com¬ 
puter,  cell  phone  and  set¬ 
top  box  can  be  hooked  up 
to  the  ’Net.  However,  mi¬ 
grating  a  large  network  to 
IPv6  is  so  difficult  that  few 
organizations  have  com¬ 
mitted  to  it.  In  an  inter- 
vieiv  with  Network  World 
Executive  Editor  Doug 
Barney  and  Senior  Editor 
Carolyn  Duffy  Marsan, 
Internet  pioneer  Vint  Cerf 
argues  that  network  man¬ 
agers  need  to  start  making 
the  transition  to  IPv6 
immediately. 


Why  is  IPv6  the  right  direc¬ 
tion  for  the  Internet? 

The  Internet  is  growing  very, 
very  quickly,  and  we  are  very 
concerned  about  running  out 
of  address  space  in  the  Version 
4  network,  which 
has  a  32-bit 
address  field.Theo- 
retically,  Version  4 
could  support  up 
to  4.2  billion  de¬ 
vices,  but  the  allo¬ 
cation  of  those  ad¬ 
dresses  has  not 
been  very  effi¬ 
cient.  We  tried  to 
increase  the  effi¬ 
ciency  with  inter¬ 
domain  routing 
and  allocation  rules  that  go 
along  with  it.  But  the  side  effect 
of  those  rules  is  the  prolifera¬ 
tion  of  network  address  transla¬ 
tion  [NAT]  boxes,  which  take  a 
single  Internet  address  and  mul¬ 
tiplex  it  among  a  bunch  of  dif¬ 
ferent  devices.  It’s  a  fairly  ugly 
process  from  an  architectural 
point  of  view,  although  it  turns 
out  to  be  very  effective,  and  a 
lot  of  people  are  relying  on  it. 
But  because  NAT  intervenes  at 
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the  IP  address  level,  it  has  some 
consequences  for  end-to-end 
security  and  integrity  of  the  traf¬ 
fic.  Many  of  us  would  just  as 
soon  solve  the  problem  of 
address  space  by  having  a 
much  larger  ad¬ 
dress  space  to  draw 
upon,  and  that’s 
what  IPv6  is  all 
about.  It  has  a  128- 
bit  address  field, 
and  that  allows 
for  10  to  the 
38th  power  possi¬ 
ble  addressable  de¬ 
vices.  We  should 
|  be  moving  toward 
1  IPv6  promptly,  and 
we  need  to  start 
now  because  the  transition  is 
fairly  complex. 

Many  people  in  the  Internet 
community  —  including  well- 
respected  engineers  and  ana¬ 
lysts  —  think  that  IPv6  is  not 
a  practical  solution.  What 
chances  do  you  give  IPv6  for 
succeeding? 

It  may  very  well  be  that  the 
only  way  to  get  to  Version  6  is 
for  NAT  boxes  to  convert 
Version  6  addresses  to  Version 
4  addresses  and  back  [for  a 
while] .  NAT  boxes  are  turning 
out  to  be  the  path  by  which 
we  get  to  Version  6. 1  challenge 
those  who  think  we  don’t 
need  to  [move  to  Version  6]  to 
come  up  with  an  alternative 
strategy  that’s  achievable  in 
the  next  several  years. 

What  will  it  take  for  IPv6  to 
succeed? 

All  of  the  vendors  of  soft¬ 
ware  in  the  edge  devices  have 
to  believe  that  we  need  to 
[migrate  to  Version  6]  and 
have  to  support  it.  One  of  the 
most  prominent  is  Microsoft 
because  of  the  huge  number 
of  devices  that  use  Microsoft 
software  to  interact  with  the 
Internet. 

All  the  router  vendors  have 
to  pay  attention  to  Version  6  so 
we  can  build  a  Version  6  core. 
Another  set  of  players  is  the 
ISPs.  A  state  of  denial  exists 
among  some  ISPs,  who  would 
just  as  soon  not  face  this  prob¬ 
lem.  Version  6  is  workable, 
even  if  we  have  to  make  use  of 
NAT  devices  in  order  to 
accommodate  the  mixture  of 
Version  4  and  Version  6  for  a 
period  of  time  in  the  network. 


What  if  IPv6  fails  to  catch  on? 

We’re  still  confronted  with 
the  problem  of  running  out  of 
Version  4  address  space.  What 
happens  if  there  are  so  many 
NAT  boxes  that  you  can’t 
uniquely  identify  them  all  with 
Version  4  addresses?  Then 
we’re  back  in  the  soup  again. 
This  is  not  a  problem  you  can 
ignore. 

If  IPv6  is  the  right  move,  why 
don't  users  want  it? 

Most  people  who  are  doing 
applications  haven’t  the  foggi¬ 
est  idea  of  what  the  IP  address 
space  looks  like  and  whether 
there’s  a  risk  of  Version  4  vs. 
Version  6.  If  anybody  should 
be  paying  attention  to  this,  it’s 
the  ISPs.  Most  of  them  are  bet¬ 
ting  the  farm  on  NAT  boxes  in 
the  near  term. 

What  are  the  global  ramifi¬ 
cations  of  not  adopting  IPv6? 

We  can  see  the  demand  for 
hundreds  of  millions  of  devices 
on  the  ’Net  already.  Cell  phones 
that  are  Internet-enabled.  Cable 
set-top  boxes  and  other  appli¬ 
ances  that  become  Internet- 
enabled.  The  people  who  are 
building  [these  devices]  are 
getting  IPv6  allocations.  If  we 
don’t  use  IPv6,  we’ll  have  to 
use  something  else  that  gives 
us  large  address  space.  It  took 
us  quite  a  while  to  get  to  IPv6. 
There  were  a  lot  of  debates,  a 
lot  of  discussions. 

The  end  result  is  a  pretty 
strong  design.  So  if  we  don’t 
adopt  it,  we  will  wind  up  hav¬ 
ing  to  do  yet  another  cycle  of 
design  and  agreement.  As  we 
do  that,  the  lifetime  of  the  IPv4 
address  space  is  getting  shorter 
and  shorter. That’s  what  I  mean 
by  being  back  in  the  soup.  B 
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•  Cerf  responds  to  criti¬ 
cism  that  IPv6  has  the 
same  privacy  issues  as 
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Choosing  a  network  operating  system 

Novell's  admission  that  it  will  not  immediately  provide  a  key 
directory  integration  tool  for  its  Novell  Directory  Services  may 
force  users  to  make  an  either/or  choice  between  NetWare  and 
Microsoft's  forthcoming  Windows  2000. 


NetWare 

Windows  NT/2000 


Estimated  NOS  installed  base  (in  millions 
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SOURCE:  I D C ,  FRAMINGHAM.  MASS 


Novell, 

continued  from  page  1 

Navy',  who  is  currently'  piloting 
NDS  for  NT.  “1  don’t  want 
to  upgrade  to  Active  Direct¬ 
ory'  now  and  then  upgrade  to 
redirect  [at  a  later  date].”  Cruik- 
shank  says  redirect  provides  a 
single  directory'  service  and  that 
consolidation  means  less  man¬ 
agement.  “If  I  had  already 
deployed,  this  would  be  a  big¬ 
ger  issue.  I  would  have  to  ask 
myself,  ‘Where  do  I  go  now?’  ” 

Faced  with  that  question,  IT 
executives  may  be  inclined  to 
choose  one  or  the  other  NOS 
for  their  enterprise,  according 
to  analysts. 

“The  lack  of  redirect  puts 
pressure  on  NDS  customers  to 
choose  between  Novell  and 
Microsoft,”  says  Daniel  Blum,  an 
analyst  with  The  Burton  Group 
in  Midvale,  Utah.  “Customers 
can’t  continue  to  run  both  direc¬ 
tories  in  parallel  quite  as  easily  as 
they  once  could.  The  value 
proposition  of  NDS  is  reduced.” 

Novell  seems  to  be  in  a  bet¬ 
ter  position  to  satisfy  customers 
right  now  because  Active 
Directory  is  not  shipping  and 
will  be  nothing  short  of  chal¬ 
lenging  to  deploy  when  it  does. 


Still,  the  issue  of  redirect  has 
users  concerned. 

“This  is  a  step  back  for  me. 
My  understanding  was  that 
they  would  offer  redirect,”  says 
one  network  architect  for  a 
large  telecommunications  com¬ 
pany,  who  asked  not  to  be 
named.  “The  best  feature  of 
NDS  for  NT  is  keeping  pass¬ 
words  in  sy  nch.  They  need  to 
recreate  that  with  DirXML.” 

Novell  says  it  will  do  that. 
“The  push  is  to  manage  user 
objects  from  both  directories  as 
one  object,”  says  Cydni  Tetro, 

■  "The  Each  of 
redirect 
puts  pres¬ 
sure  on  l\IDS 
customers 
to  choose 
between 
Novell  and 
Microsoft. " 

Daniel  Blum,  analyst, 

The  Burton  Group 


product  manager  for  NDS. 

The  mothballing  of  redirect 
is  somewhat  of  an  about-face 
for  Novell,  which  had  promised 
the  technology  would  be  there 
for  Active  Directory.  Two  weeks 
ago  at  the  Gartner  Group  sym¬ 
posium,  Novell  CEO  Eric 
Schmidt  began  selling  the 
change,  saying  the  mechanics  of 
how  NDS  and  Active  Directory 
synchronize  will  vary  from  NT 
4.0  to  Windows  2000  but  “from 
the  customer  perspective,  the 
functionality  is  the  same.” 

While  some  experts  dispute 
Schmidt’s  assessment,  cus¬ 
tomers  committed  to  redirect 
may  be  on  a  dead  end.  Two 
weeks  ago,  Novell  officials 
admitted  that  Active  Directory 
redirection  is  difficult  because 
an  entire  subsystem  has  to  be 
replaced. 

Some  observers  go  further, 
saying  that  redirection  is  impos¬ 
sible.  But  Drew  Major,  Novell’s 
chief  scientist,  last  week  down¬ 
played  the  difficulty,  saying  the 
technology  will  be  developed 
over  the  long  term. 

But  Novell  appears  to  be 
hedging  its  bet  that  users  will 
eventually  accept  synchroniza¬ 
tion,  the  same  technology 
Microsoft  is  developing,  over 


redirection. 

“Novell  doesn’t  want  to  do 
more  work  than  they  have 
to,”  says  Laura  DiDio,  an 
analyst  with  Giga  Information 
Group  in  Cambridge,  Mass.  In 
addition,  synchronization  is 
Novell’s  strategy  as  it  pushes 
NDS  into  the  electronic  com¬ 
merce  market. 

DiDio  says  both  vendors 
know  users  don’t  want  to  run 
two  NOS  directory  services  for 
the  same  reasons  they  did  not 
want  to  run  both  IP  and  IPX 
protocol  stacks. 

While  synchronization  is  not 
a  bad  alternative  to  redirect,  it 
can  mean  as  much  as  a  60% 
increase  in  administration  for 
NetWare  shops  running  NDS 
for  NT,  according  to  experts. 

Putting  redirect  on  the  back 
burner  is  not  entirely  Novell’s 
doing.  Microsoft  tried  to  make 
redirection  impossible  when 
developing  Active  Directory, 
according  to  observers.  When 
coupled  with  Novell’s  decision 
to  shelve  redirect,  it  pushes 
users  into  a  fog  of  choices. 

IT  executives  can  install  NDS 
8,  and  upgrade  to  NDS  8  for  NT 
and  deploy  the  1.0  release  of 
DirXML,  both  of  which  ship 
early  next  year.  Novell  will 
release  migration  and  upgrade 
tools  for  DirXML,  a  set  of  direc¬ 
tory  connectors.  The  upgrade 
also  requires  NetWare  5.0  and  a 
new  client. 

Users  could  also  uninstall 
NDS  for  NT,  migrate  off  Net¬ 
Ware,  and  adopt  Windows  2000 
Active  Directory.They  could  run 
NDS  and  synchronize  it  with 
Active  Directory  or  vice  versa. 

IT  executives  also  could  opt 
to  run  NDS  natively  on  multiple 
platforms. Versions  of  NDS  8  for 
NT,  Linux  and  Solaris  are 
expected  to  ship  in  60  days.  And 
a  version  for  Windows  2000  is 
under  development,  according 
to  Paul  Corriveau,  product  mar¬ 


keting  manager  for  NDS. 

Users  also  have  the  option  of 
running  NetVision’s  Synch- 
ronicity,  which  provides  a  single 
point  of  user  administration 
through  NetWare  Administrator, 
the  management  console  for 
NDS.  Novell  itself  bought  into 
that  option  when  it  licensed 
Synchronicity  in  September. 

“We  went  with  Synchron¬ 
icity  because  we  are  looking  to 
migrate  away  from  Novell,  and 
if  you  can’t  redirect,  you  add 
administrative  overhead,”  says 
Dana  Arnett,  network  services 
manager  for  Asante  Health 
Systems  in  Medford,  Ore. 

“Novell  saw  the  failure  of 
redirect  coming,”  says  Todd 
Lawson,  president  of  Net- 
Vision.  “That’s  one  of  the  rea¬ 
sons  they  licensed  Synchron¬ 
icity,  it  was  their  trump  card.” 

With  the  trump  card  down, 
users  will  have  to  decide  which 
direction  to  pursue. 

“If  I  had  a  mixed  environ¬ 
ment,  I  would  wait  and  see  the 
effort  it  takes  to  deploy  Active 
Directory  and  then  see  if  Active 
Directory  or  NDS  is  best  for  my 
environment,”  says  Giga’s 
DiDio.  “Without  redirect,  users 
will  have  to  choose.”  3 
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Clarification 

A  recent  article  (NW, 
Oct.  11,  page  27)  mischar- 
acterized  Alcatel's  plans  for 
competing  for  enterprise 
business.  Alcatel's  branch 
office  strategy  is  part  of  an 
overall  enterprise  strategy 
that  includes  its  core  rout¬ 
ing  business. 


FOURTH  EXEC  LEAVES  NOVELL 


A  fourth  departure  from  executive  manage¬ 
ment  at  Novell  has  customers  and  indus¬ 
try  analysts  questioning  whether  the 
company's  recent  turnaround  is  built 
upon  a  strong  enough  foundation. 

The  latest  to  leave,  Vice  President  of 
Marketing  Patti  Dock,  had  her  position 
"eliminated  because  of  a  realignment  in 
Novell's  marketing,"  says  Jonathan  Cohen, 
a  company  spokesman.  Only  on  the  job  six 
months,  Dock's  exit  was  preceded  by  those 
of  previous  marketing  head  John  Slitz  and 
senior  vice  president  for  strategy  Chris  Stone, 
both  of  whom  were  brought  into  Novell  two 
years  ago  by  CEO  Eric  Schmidt  and  shared 
credit  for  the  company's  better  performance. 
Glen  Ricart,  chief  technology  officer  at  Novell, 
also  left  in  June. 

The  departures  have  not  gone  unnoticed. 
Bob  Markham,  senior  network  architect 
with  the  American  Red  Cross  in  Washington, 
isn't  surprised  in  light  of  the  way  Novell  han¬ 
dled  recent  product  introductions.  Novell 
missed  opportunities  in  the  Internet  before  the 
arrival  of  Eric  Schmidt,  Markham  says,  and  the 
company's  failure  "to  establish  Novell 
Directory  Services  over  the  Lightweight 
Directory  Access  Protocol"  has  lowered  his 
confidence  in  the  company's  direction. 

Novell's  marketing  woes  have  also  worried 


Georgetown  University. 

"We've  talked  to  Novell  over  the  years 
about  having  a  strategy  and  plan,"  says 
Ron  Nicholson,  a  product  manager.  "The  uni¬ 
versity  is  concerned  about  Novell's  future  and 
is  presently  evaluating  a  more  unified  system 
for  e-mail."  Georgetown  has  12,000  Group- 
Wise  users. 

Nicholson  believes  Novell  is  trying  to  address 
its  marketing  problems  and  hopes  the  com-pany 
continues  to  talk  to  IT  executives  about  the  busi¬ 
ness  benefits  of  technology,  rather  than  focus 
on  technical  network  specialists. 

One  industry  expert  agrees. 

Dan  Kuznetsky,  an  analyst  with  International 
Data  Corp.  says  the  people  responsible  for 
focusing  the  company  on  the  business  values  of 
products  rather  than  their  technological  value 
have  left.  "Novell  has  to  continue  talking  about 
the  business  rationale,  how  much  money  a 
company  could  save  or  make,"  says  Kuznetsky. 
"It  concerns  me  that  Novell  will  retreat  back 
into  speaking  to  technologists,  rather  than  the 
IT  executives  it  needs  to  reach." 

Morale  at  Novell  has  taken  "some  tempo¬ 
rary  hits"  over  the  departures,  says  Cohen, 
who  also  notes  that  morale  in  general  has  sta¬ 
bilized  under  Schmidt's  leadership. 

—  Deni  Connor 
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Your  enterprise  is  only 
as  available  as  its  power 


APC  Smart-UPS®:  Legendary  power 
protection  for  critical  remote  servers 


With  users  and  customers  demanding  that  critical  servers 
be  up  99.999%  of  the  time,  power  problems  are 
the  last  thing  you  should  have  to  worry  about. 

Short  blackouts,  sudden  sags  or  simple  power 
surges  can  mean  the  instant  destruction  of 
cards,  disks  and  processors.  This  means  lost 
data  and  unplanned  downtime. 

Be  ready  for  the  unexpected.  No  other  product 
offers  more  advanced  protection  for  networks 
and  servers  than  the  APC  Smart-UPS  family. 

Consider  how  Smart-UPS  can  safeguard  your  critical  servers: 

•  Pre-failure  diagnostics  -  It  allows  network  administrators  to 
solve  problems  before  users  know  they  exist. 


Smart-UPS  5000 
Rack-mount 


•  Availability  -  Instantaneous  battery  backup  power  keeps  appli¬ 
cations  and  operating  systems  up  and  running  and  safe  from 
power-related  crashes. 


•  Intelligent  Battery  Management  -  With  FastCharge™,  battery 
recharge  time  is  cut  by  75%. 

•  Web  SNMP  -  With  a  Web/SNMP  card, 

Smart-UPS  can  be  monitored  and  managed 
remotely  with  a  Web  browser  or  SNMP  NMS. 


•  Remote  -  E-mails  or  pages  network  administrators  via 
FlexEvents™  before  users  know  of  problems. 


•  Manageability  -  Provides  warnings,  environ¬ 
mental  monitoring  and  safe  shutdown  using 
PowerChute®  plus  software. 


APC's  NetShelter®  offers  manageable  enclosure  space  for  all 
your  networking  equipment  including  Compaq,  Dell,  HP,  Cisco, 
Nortel  Networks,  3Com  and  IBM. 


"APC  NetShelters  and  Smart-UPS  have  become  the  standard 
install  for  all  our  offices  at  Nextel...  knowing  we  can  count 
on  APC  saves  us  time  and  provides  us  with  peace  of  mind." 

-  James  Whitaker,  Novell  Architecture  and  Design  Engineer, 
Tom  Schmidt,  Novell  Host  Server  Architect, 

Troy  Sims,  Novell  Host  Server  Architect 


Find  out  why  APC  is  the  brand  of  choice  for  critical  server 
protection.  Our  technology  grows  with  your  business  and  can 
help  power  protect  your  new  applications  as  you  roll  them  out. 
Contact  APC  today  and  let  APC's  Legendary  Reliability  “ 
work  for  you. 


Legendary  Reliability" 


FREE  Power  Availability  Kit  Or  save  46%  on  a  new  UPS  with  our  Reliability  Upgrade  Program 

Go  to  the  web  and  learn  how  to  increase  uptime  in  your  enterprise.  Also  trade  your  old  UPS  for  a  new  one  with  APC's  Reliability  Upgrade  Program 

To  order:  Visit  http://promo.apcc.com  Key  Code  o432z  •  Call  888-289-APCC  x7729  •  Fax  401  -788-2797 
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Free  Product  info  enter  NWInfoXpress  #104  online  @  www.networkworld.com/infoxpress 
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Yours  is  no  ordinary  business,  and  the  Summit7i™  is  no  ordinary  switch. 

It  combines  the  benefits  of  a  stackable  with  the  performance  and  density 
of  a  chassis  -  32  Gigabit  ports,  64  Gbps  capacity  and  48  million  pps 

throughput.  Which  ensures  wire-speed 
performance  and  resiliency  for  co-located 
servers.  Plus  prioritization  and  bandwidth 
control  for  ERP  and  e-commerce  traffic.  And 
it  runs  on  existing  Category  5  twisted-pair 
cabling.  But  the  most  astonishing  thing 
about  Summit7i  is  the  incredibly  low  price  per  port.  It’ll  do  more  than  just 
turn  a  few  heads.  1'or  more  information,  call  us  or  visit  our  web  site. 


www.extremenetworks.com/ad/seven.htm 
888-257-3000,  ext.  3131  (U.S.) 

♦1  408-579-3131  (Outside  U.S.) 


Extreme  Networks.  All  rights  reserved.  Extreme  Networks  is  a  registered  trademark,  and  the  Extreme  Networks  logo 
iummit7i  are  trademarks  of  Extreme  Ketworks.  All  other  company  names  or  products  are  trademarks  or  registered 

trademarks  of  their  respective  companies. 


Free  Product  info  enter  NWInfoXpress  #98  online  @  www.networkworld.com/infoxpress 
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Infrastructure 

_  TCP/IP,  LA N/WAN  Switches.  Routers.  Hubs.  Access  Devices. 

Clients,  Servers,  Operating  Systems,  VPNs,  Networked  Storage 


Briefs 


Computer  Associates  last 
week  announced  software  and 
service  support  for  IBM's  OS/390 
operating  system  and  the  new 
S/390  Multiprise  3000  server  plat¬ 
form.  The  announcement  includes 
a  cooperative  distribution  and 
licensing  effort  targeted  at  help¬ 
ing  companies  doing  business 
over  the  Internet.  CA  is  also 
working  with  IBM  on  pretested 
Multiprise  server  software  bun¬ 
dles  to  optimize  database  perfor¬ 
mance,  improve  management 
and  handle  Internet  workloads. 
Also,  as  part  of  a  new  pricing 
plan  for  OS/390  software,  CA  will 
offer  packages  and  products  on 
a  monthly  lease  for  "as  low  as 
$6,000  per  month." 

CA:  www.cai.com 

IBM  last  week  announced 
EverGreen/400,  a  software  pack¬ 
age  for  AS/400  midrange  servers 
that  lets  5250  users  make  e-mail 
connections  to  any  standard 
e-mail  server.  With  EverGreen/400, 
existing  5250  terminals  can  send 
and  receive  Internet  e-mail  mes¬ 
sages,  including  Multi-purpose 
Internet  Mail  Extensions  attach¬ 
ments.  To  support  the  product,  the 
AS/400  server  must  be  running 
OS/400  Version  3,  Release  1  or 
later  and  IBM's  AnyMail/400  and 
TCP/IP  Connectivity  Utilities. 
EverGreen/400  is  available  with 
pricing  starting  at  $880. 

IBM:  www.ibm.com 

Connex,  a  Western  Digital 
company,  announced  its  entry 
into  the  network-attached  storage 
market  with  the  Connex  N3000 
storage  appliance.  Designed  for 
midsize  business  workgroups  and 
remote  offices,  the  product  has  a 
useable  storage  capacity  of  90G 
bytes  and  connects  to  the  net¬ 
work  via  a  10/100M  bit/sec  Ether¬ 
net  interface.  The  Connex  N3000 
will  be  available  in  January  for 
$6,000. 

Connex:  www.connex.com 
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Vacuum  cleaner  firm  sucks  up  to  VPNs 


dial-up  remote  access  services  folks 
were  using  to  access  the  corporate 
LAN,  Prue  pointed  out. 

The  initial  goal  was  pretty  straight¬ 
forward.  “What  was  being  looked  for 
was  the  simple  ability  to  do  anything 
we  could  do  via  dial-up  but  over  the 
Internet,”  Prue  explains.  He  points 
specifically  to  accessing  the  company’s 
Microsoft  Exchange  e-mail  servers  and 
transferring  files  back  and  forth  with 
Fantom’s  Windows  NT  servers. 

With  such  compelling  logic  and  his 
own  experience  behind  him,  Prue  got 
the  go-ahead.  Now  it  was  time  to  do 
the  research.  After  poking  around  a  bit, 
Prue  decided  to  check  out  his  existing 
firewall  vendor,  Secure  Computing, 
which  slid  Fantom  some  new  VPN  gear 
to  experiment  with. 

Prue  basically  liked  what  he  saw, 
See  In-Site,  page  24 


Datrick  Prue  had  a  simple  reason 
for  wanting  to  try  out  a  virtual  pri¬ 
vate  network  (VPN):  He  was  just 
being  selfish.  The  26-year- 
old  systems  and  technology 
specialist  for  Fantom  Tech¬ 
nologies  in  Welland,  Ontario, 
wanted  to  do  his  work  —  manag¬ 
ing  systems  —  from  home,  mak¬ 
ing  use  of  his  snazzy  high-speed 
cable  modem. 

Fortunately  for  Fantom,  Prue’s 
little  experiment  worked.  The 
work  was  done  over  the  Internet. 

With  those  results  in  hand, 

Prue  approached  his  superiors 
with  a  solid  business  case.  Let 
workers  for  the  Canadian  vacu¬ 
um  cleaner  maker  take  advantage 
of  increasingly  common  high¬ 
speed  connections  to  the  Net  — 
cable  modems,  digital  subscriber 


line  and  the  like  —  to  get  real  work 
done  at  home.  Oh,  and  by  the  way,  we 
can  save  a  heap  on  the  800  number 


Fantom's  Patrick  Prue  first  tested  out  VPN 
technologies  at  home. 


Too  many  servers?  Try  a  consolidation  program 


BY  MARC  SONGINI 

IBM  and  other  server  vendors  are  only 
too  happy  to  sell  you  as  many  servers  as 
you’d  like.  But  some  of  those  same  ven¬ 
dors  would  also  be  pleased  to  sell  you  a 
service  that  would  ultimately  reduce  the 
number  of  servers  in  your  shop,  bringing 
down  your  hardware  and  management 
costs  in  the  process. 

For  a  variety  of  reasons,  such  as  the 
growth  of  electronic  commerce,  some 
companies  are  forced  to  add  more 
servers  than  they  are  equipped  to  han¬ 
dle. To  remedy  this  thorny  problem,  new 
services  and  software  tools  offered  by 
IBM,  Compaq,  Hewlett-Packard,  Sun  and 
others  can  help  customers  evaluate  their 
server  farms  and  find  ways  to  reduce  the 
number  of  servers. 

But  vendors  in  the  server  consolida¬ 
tion  business  have  different  approaches, 
and  the  user  must  select  accordingly, 
warns  Wayne  Kernochan,  an  analyst  with 
Aberdeen  Group,  a  consultancy  in 
Boston.  For  instance,  Unisys  is  focusing 
on  consolidating  on  Windows  NT 
machines,  while  Sun  is  trying  to  replace 
NT  servers  with  its  Solaris  boxes,  he 


says.  IBM,  with  its  vast  services  organiza¬ 
tion,  has  the  broadest  approach. 

Server  “consolidation”  may  not  be  the 
right  phrase  —  optimization  might  be 
closer  to  the  mark,  says  Rich  Fuchs,  an 
executive  in  IBM’s  server  consolidation 
program.  Companies  achieve  a  10%  to 
15%  reduction  in  overall  IT  costs 
annually  with  server 
reduction  —  including 
hardware  depreciation 
costs,  site  costs,  person¬ 
nel  and  more,  he  says. 

The  company  is 
quick  to  point  out  that 
larger  users  typically 
have  a  mix  of  servers, 
such  as  mainframes, 

AS/400s  and  NT 
machines,  running  a 
variety  of  applications. 

These  users  may  not 
want  to  consolidate  all 
their  server  applica¬ 
tions  on  one  platform, 
and  they  need  someone  who  can  assist 
them  no  matter  what  the  application  or 
brand  of  box  they  carry.  IBM  won’t  nec¬ 
essarily  try  to  sell  customers  on  its  boxes. 


To  simplify  things,  IBM  believes  cus¬ 
tomers  should  concentrate  first  on  low¬ 
ering  total  cost  of  ownership,  which  can 
be  achieved  by  simplifying  the  existing 
network,  for  example.  Next,  customers 
should  look  at  improving  service  levels, 
thus  ensuring  continuous  availability 
and  improving  server  performance. 

An  additional  bur¬ 
den  for  IT  staffs  is  the 
need  to  get  their  appli¬ 
cations  up  and  running 
as  fast  as  possible.  In 
such  cases,  the  net¬ 
work’s  server  topology 
can  actually  be  an 
extra  layer  of  complex¬ 
ity'  that  can  hinder 
speed  to  market. 
Information  location  is 
another  key  area  — 
the  IT  staff  must  learn 
how  to  find  data  in  the 
network  and  get  it  to 
the  right  people  at  the 
right  time,  IBM  says. 

These  things  are  not  addressed  just  by 
adding  new  hardware  —  they  also 
See  Servers,  page  28 


Incyte  Pharmaceuticals'  Philip 
Kwan  was  able  to  consolidate  50 
to  60  Sun  servers  into  just  three. 
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JASON  GROW 


Quantum*  Snap  Server™  is  the  ideal  solution  for  upgrading  your  network  storage.  It  offers  the  perfect 


combination  of  quick  and  easy  installation  at  prices  far  below  what  you  would  pay  for  a  traditional  NT 


server.  It’s  pre-configured  to  work  in  all  major  network  environments,  which  means  you  really  just  plug 


it  in  and  turn  it  on  -  with  no  network  downtime.  In  fact,  the  Snap  Server  is  so  hassle-free,  it  installs  in 
less  than  15  minutes!  Simply  call  1-888-343-SNAP  or  visit  our  website  for  more  information. 


Quantum. 

If  it’s  important  to  you,  save  it  with  us. 


* 

Winner 


BESrWUI! 


©  1 999  Quantum  Corporation.  All  rights  reserved.  Quantum  and  the  Quantum  logo  are  trademarks  of  Quantum 
Corporation,  registered  in  the  U.S.A.  and  other  countries.  Snap  Server  is  a  trademark  of  Quantum  Corporation.  All 
other  product  names  are  trademarks  of  their  respective  companies. 


Performance  Pentium-class  processor  with 

•  Quantum"  Ultra  ATA  hard  disk  drives 

•  RAID  0,1  (striping,  mirroring) 

•  Unlimited  license,  easily  supports  100  clients 


Compatibility  Simultaneous  support  for  Windows  2000, 
NT,  NetWare,  UNIX  and  Macintosh  networks  and  clients 
across  TCP/IP,  IPX,  NetBEUI  and  AppleTalk 


Network  Security  Integrates 
with  NT  Domain  Controller  and 
NetWare  Bindery  servers  or  local 
user  list 


Price 


20GB  -  $999 


Guarantee  Unconditional 
30-day  money-back  guarantee 
on  all  Snap  Servers,  plus  3-year 
parts  Sc  labor 


40GB  -  $1799 


Snap! 


serwr 


www. snapserver.com 
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Polycom  targets  high-end  videoconferencing  market 


BY  JASON  MESERVE 

SAN  JOSE  —  Taking  a  page 
out  of  the  Japanese  car  makers’ 
playbook,  Polycom  is  looking 
to  offer  customers  high-end 
videoconferencing  equipment 
for  corporate  boardrooms 
with  the  release  of  two  new 
products. 

Polycom  is  beefing  up  its 
product  line  with  the  new 
ViewStation  FX  and  VS4000  sys¬ 
tems  to  offer  what  it  calls  near- 
TV  quality  video  and  audio  for 
large  conference  needs,  such  as 
boardroom  and  distance  learn¬ 
ing  applications.  Previously, 
Polycom  has  served  the  middle- 
market  arena,  selling  sub- 
$10,000  conferencing  systems 
for  desktops  and  small  confer¬ 
ence  rooms. 

“Think  of  this  strategy  like 
Toyota  introducing  Lexus  — 
it’s  luxury,  but  not  as  expensive 


and  does  everything  and  more 
[than  the  higher-priced  com¬ 
petitors,]”  says  Jason  Ader, 
research  analyst  at  H.C. 
Wainwright  &  Co.  in  Boston. 


With  four  times  more  pro¬ 
cessing  power  than  its  prede¬ 
cessors  and  the  ability  to  trans¬ 
mit  at  over  1M  bit/sec  across 
T-l  connections,  the  new  units 
should  offer  “superior  video,” 


says  Andrew  Davis,  managing 
partner  at  Wainhouse  Consult¬ 
ing  Group  in  Brookline,  Mass. 

“We’ve  been  able  to  include 
more  annexes  to  the  H.263 
standard  for  better 
motion  handling  and 
background  cleanup,” 
says  Jennifer  Sigmund, 
group  marketing  man¬ 
ager  for  Polycom’s 
video  division. 

The  units  feature  a 
four-port  bridge  that 
will  host  four  partici¬ 
pants  at  up  to  384K 
byte  speeds  or  three 
participants  at  512K 
bytes  and  can  stream 
conferences  across  the 
Internet  in  either  Real  G2  or 
Cisco  IPTV  formats.  They  also 
support  H.323  (Internet),  v.35 
(ISDN)  and  primary  rate  inter¬ 
face  (satellites,  frame  relay) 
calls  within  the  same  unit. 


Both  new  products  can  inter¬ 
face  with  room-based  remote 
control  units  and  interface 
with  XGA  high-resolution 
video  projectors. 

The  ViewStation  FX  is  a  stan¬ 
dard  unit  with  built-in  camera 
and  audio  equipment,  while 
the  VS4000  is  a  rack-mount  sys¬ 
tem  designed  to  fit  in  a  closet 
and  be  used  for  custom  video- 
conferencing  systems.  Both 
support  the  use  of  a  second 
camera,  dual  microphones  and 
remotes,  as  well  as  other  inputs 
for  mixing  audio  and  data. 

Both  products  will  be  avail¬ 
able  in  Q1  of  next  year  and  are 
priced  between  $17,000  and 
$19,000. 

While  Polycom  claims  that 
this  isn’t  a  huge  market  area  for 
them,  it  is  an  expansion  of  their 
existing  product  line  that  will 
allow  their  distributors  (the 
company  does  not  have  direct 


sales)  to  sell  from  top  to  bot¬ 
tom  in  a  company.  “This 
announcement  shows  the  com¬ 
pany  has  its  sights  set  on  the 
whole  pie,  not  just  the  slice 
they  dominate,”  Davis  says.  “If 
anyone  had  reasons  not  to  buy 
Polycom,  those  reasons  have 
evaporated.” 

Polycom  also  announced 
recently  that  it  signed  a  deal 
with  Lucent,  making  it  the 
exclusive  provider  of  videocon¬ 
ferencing  equipment  to  all 
Lucent’s  new  customers.  In 
1998,  Lucent  sold  some  $20  mil¬ 
lion  in  PictureTel  equipment, 
one  of  Polycom’s  biggest  com¬ 
petitors,  says  Ader. 

The  deal  also  calls  for  the 
two  companies  to  jointly  devel¬ 
op  products  in  the  IP  market, 
such  integrating  multipoint  and 
other  network  capabilities  into 
Lucent’s  next-generation  PBX 
equipment.  B 


The  ViewStation  FX  includes  a  camera 
and  video  equipment. 


In-Site, 

continued  from  page  21 

especially  the  way  the  Secure 
offering  worked  with  his  exist¬ 
ing  SecureZone  2.0  firewall, 
which  now  serves  as  the  basis 
of  one  of  two  different  VPN 
approaches. 

Just  the  basics 

For  people  with  fairly  sim¬ 
ple  needs,  Prue  crafted  a  fairly 
simple  solution. These  employ¬ 
ees  simply  tunnel  through  the 
firewall  into  the  Fantom  LAN 
using  the  Point-to-Point 
Tunneling  Protocol  (PPTP) 
that  is  built  into  Microsoft 
Proxy  Server  2.0,  a  tool  that  is 
bundled  with  Microsoft 
BackOffice  and  also  available 
separately. 

Those  who  have  lower-end 
machines  and  lower-end  needs 
should  not  feel  too  slighted. 
With  the  home-grown  PPTP 
package,  users  can  access 
what  they  need.  With  the 
strong  encryption,  Prue  knows 
their  data  is  not  likely  to  be 
compromised. 

This  strictly  software-cen¬ 
tric  approach  required  no 
changes  to  the  firewall,  Prue 
says.  For  people  with  more  rig¬ 
orous  requirements,  Prue  craft¬ 
ed  a  much  higher-end  system. 
These  users  are  equipped  with 
SecureClient  software  that, 
with  the  firewall’s  permission, 


gives  them  access  to  sensitive 
corporate  data.  The  key  to  this 
approach  is  defining  who  can 
get  to  what.  By  using  smart 
cards,  the  users  can  be  posi¬ 
tively  identified.  And  the  smart 
cards  make  the  system  that 
much  more  secure. 

But  not  everyone  is  the 
same,  or  deserves  the  same 
access.  Fortunately,  the  Secure 
Firewall  lets  Fantom  managers 
define  rules,  based  on  each 
user’s  account,  that  dictate 
what  network  resources  each 
person  can  access  over  the 
VPN. 

Like  many  of  today’s  VPN 
shops,  Fantom  is  starting 
small.  Only  about  five  to  eight 
people  currently  tap  into  the 
LAN  this  way.  But  the  compa¬ 
ny  has  some  big  ideas,  and 
hopes  that  this  technology 
will  eventually  serve  as  the 
basis  of  an  extranet  that  will 
give  salespeople  on  the  road, 
as  well  as  business  partners, 
customers  and  suppliers, 
secure  and  defined  access  to 
Fantom  network  resources. 

Not  all  technologies  truly 
change  peoples’  lives,  but 
VPNs  can  and  do.  “VPN  tech¬ 
nology  has  allowed  for  a  more 
blended  lifestyle  so  you  can 
spend  time  at  home  with  the 
family  but  still  be  in  touch 
with  the  corporate  LAN  within 
minutes  compared  to  dial-up.” 

Ultimately,  this  approach 


could  be  liberating  for  employ¬ 
ees  and  for  the  corporation, 
which  can  hang  onto  workers. 
“[VPNs]  allow  businesses  to 
more  effectively  manage  and 
employ  telecommuters.  I  can 


easily  see  not  having  to  leave 
home  when  the  bandwidth 
totally  allows  us  to  do  any  kind 
of  work,”  Prue  says. 

VPNs  are  new,  which  may 
be  why  they  are  not  perfect. 
The  Secure  client  has  proven 
to  be  easy  to  use,  if  occasional¬ 


ly  flaky.  And  the  company  is 
currently  experiencing  about 
75%  uptime  with  the  system, 
which  is  actually  good  com¬ 
pared  to  its  old  remote  access 
services  approach,  and  accept¬ 


able  for  the  type  of  casual  use 
the  system  is  currently  experi¬ 
encing.  But  this  is  not  yet  a  sys¬ 
tem  that  Fantom  would  trust 
for  mission-critical  use. 

In  the  near  term,  Fantom 
can  look  forward  to  more  dial¬ 
up.  “Based  on  routing  all  the 


dial-up  traffic  over  to  VPN  use, 
we  should  start  seeing  cost 
reductions  in  the  neighbor¬ 
hood  of  $750  to  $1,050 
monthly  on  the  800  circuit  uti¬ 
lization,”  Prue  says. 

So  what  else  might  be  on 
the  agenda?  One  thing  Prue  is 
eyeing  is  offering  access  to 
SAP  client  software  over  the 
VPN. 

“I  definitely  feel  that 
VPN/extranet  technologies 
will  steer  us  toward  more 
direct  business-to-business 
communications  and  will  elim¬ 
inate  some  of  the  value-added 
networks  that  are  currently 
used,”  Prue  says. 

Prue  has  advice  for  those 
interested  in  following  in  his 
tracks.  “Carefully  assess  your 
needs.  Will  a  hardware  solu¬ 
tion  better  suit  what  you  are 
trying  to  accomplish  or  will  a 
software-only  solution  suf¬ 
fice?”  Prue  says. 

Overall,  end  users  are 
happy,  and  IS  is  generally 
pleased.  “There  have  been  a 
few  bumps  in  the  road  as  to 
getting  the  system  tuned  and 
operating  correctly,  but  that’s 
to  be  expected  with  any  new 
technology.” 

That  is  just  fine  for  Prue, 
who  recalls,  “I  was  one  of 
those  kids  that  liked  to  take 
things  apart,  and  put  them 
back  together  —  with  extra 
parts.”  B 


Fantom's  simple  but  effective  VPN 

Fantom  took  advantage  of  the  VPN  technology  built  into  Micro¬ 
soft  Windows,  then  added  a  few  bells  and  whistles. 

O  A  client  using  Microsoft  PPTP  establishes  an  encrypted  tunnel 
connection  over  the  Internet  and  passes  through  a  firewall.  ^ 

Web  server 


Encrypted  tunnel 

4  m 


Client  using 
Microsoft  PPTP 


Q  In  the  "demilitarized 
zone"  of  the  network 
sits  Fantom's  Web 
server  and  VPN 
authentication  server. 


Client  authen¬ 
tication  server 


Internal  LAN 


0  Before  gaining  access  to  the  internal  LAN,  the 
client  must  be  verified  by  a  second  firewall, 
which  provides  an  extra  layer  of  security  for 
internal  data. 
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DOES  ALL  THE  HYPE  ABOUT  INTERNET  VPNs  LEAVE 
YOU  LOOKING  FOR  OTHER  WAYS  TO  COMMUNICATE? 


These  days,  much  of  the  talk  surrounding  Internet  VPNs  isn't  much  more  than  smoke.  That's  why 
hundreds  of  leading  businesses  are  turning  to  UUNET"  when  they  need  reliable  global  VPN  services 
that  are  a  reality  today.  After  all,  UUsecureSM  VPN  is  a  managed  end-to-end  VPN  that's  unmatched 
in  the  industry.  As  part  of  the  MCI  WorldComSM  global  fiber  network,  we  can  carry  your  critical 
data  from  local-to-global-to-local  seamlessly.  With  UUNET,  you  don't  just  get  access  to  the  world's 
most  rigorously  engineered  Internet  network.  You  also  get  security  features  of  a  private  network, 
at  a  fraction  of  the  cost.  So  if  you're  tired  of  high-flyers  with  empty  promises,  call  1  800  258  9688 
or  visit  www.info.uu.net/vpn.  You'll  quickly  discover  that  only  UUNET  dares  to  guarantee  network 
availability,  performance  and  latency.' And  that's  no  stunt. 


An  MCI  WorldCom  Com\ 

■ 


Is  bad  web  site  performance  sending  the  wrong  message? 


!n  today’s  competitive 


e-commerce  world,  one  thing’s  for  sure:  if  you  aren’t  delivering  meaningful  content,  you’ll  never  be  delivering  product.  Something  you  won’t 
have  to  worry  about  with  Sandpiper.  After  all,  we  invented  content  delivery.  And  our  worldwide  network  of  powerful  servers  is  renowned 


"W€  U^V€  VUs  €**ncV  s\^€.<^r€y  youVe  looking  '^<3v‘* 
I^iaa  ji\sV  v\oV  ^d\)\oj  Vo  skew  iV  Vo  yoi\.^ 


for  pushing  the  fastest,  freshest  information  to  some  of  the  busiest  sites  on  the  globe.  Sites  that  rely  on 
us  to  make  sure  their  users  are  getting  everything  they  expect.  And  then  some.  To  find  out  more,  visit 
www.sandpiper.net.  Or  call  1-877-446-7000.  We’ll  help  make  sure  your  customers  stay  your  customers. 
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Servers, 

continued  from  page  21 

require  looking  at  business  processes. 
IBM  uses  a  variety  of  tools,  such  as  its 
Align  model,  to  solve  the  optimization 
problems  of  networks.  Align  is  a 
methodology  IBM  has  created  from  its 


consulting  experience.  With  the  aid  of 
user  profiles,  Align  makes  recommen¬ 
dations  to  achieve  certain  goals.  In  the 
future,  IBM  hopes  to  offer  a  Web  ver¬ 
sion  of  the  Align  tool  that  users  can 
access  over  a  PC  and  that  will  help 
them  evaluate  their  networks.  From 
there,  the  user  can  go  to  an  IBM  busi¬ 


ness  partner  for  further  assistance, 
Fuchs  says. 

Once  the  general  goals  are  estab¬ 
lished,  IT  professionals  can  get 
more  specific  about  the  technology 
involved.  In  implementing  an  opti¬ 
mization  scheme,  some  things  may 
have  to  stay  the  same  while  others 


ZERO 

BIT  ERROR  RATE 


DATA  TRANSMISSION 
THROUGH  YOUR 
CABLING  SYSTEM  CHANNEL 
DOESN'T  GET  ANY  BETTER 
THAN  THIS. 


Krone  and 
Prestolite 
have  developed 
new  testing 
and  manufacturing 
methodologies  which 
assure  all  cable  and 
connection  components  are 
tuned  to  eliminate  impedance 
mismatches  throughout  the  entire 
structured  cabling  system.  As  a  result, 
only  Krone/Prestolite  warrants  performance 
that  goes  far  beyond  Category  5,  5e  or  6  compliance 
with  our  revolutionary  TRUENET™  cabling  system. 
TRUENET  ensures  you  get  the  most  from  your  active 
network  equipment  and  all  the  bandwidth 
you  pay  for.  TRUENET  optimizes  bandwidth 


TRUE 


and 

network 
speed  within 
the  structured 
cabling  channel 
by  eliminating 
data  re-transmissions. 
This  is  accomplished 
through  implementation  of 
impedance-matching  standards 
that  are  five  times  more  rigorous  than 
current  industry  standards.  The  result  —  we 
guarantee  zero  bit  error  rate  data  transmission  throughout  your 
entire  cabling  system  channel  including  patch  panels,  horizontal 
cabling,  jacks  and  patch  cords.  For  network  performance 

you've  always  wanted,  visit  our  web  site 
or  call:  800-775-KR0NE. 


& 


KRONE 


www.truenet.prestolitewire.com 


28 


TFl^XprestniitB 
^IhULure 

Free  Product  info  enter  NWInfoXpress  #108  online  @  www.networkworld.com/infoxpress 

Network  World  October  25.  1  999  www.nwfusion.com 


change.  If  a  company’s  primary  goal 
was  to  save  money,  IBM  would  create 
a  database  of  all  of  that  company’s 
network  resources.  Say  the  company 
had  six  entry-level  RS/6000  servers 
running  e-business  applications,  as 
well  as  a  more  powerful  RS/6000  that 
was  being  underutilized.  The  compa¬ 
ny  could  consolidate  the  e-business 
applications  on  the  more  powerful 
server  and  save  on  the  administration 
and  hardware  costs  associated  with 
the  six  smaller  boxes.  There’s  an  infi¬ 
nite  variety  of  ways  to  implement  an 
optimization,  IBM  says. 

Some  other  vendors  have  different 
approaches.  Sun  has  a  9,000-member 
professional  services  branch  able  to 
execute  a  thorough  consolidation  pro¬ 
gram,  but  only  on  the  Solaris  platform, 
unlike  IBM  or  Compaq,  which  will 
work  with  other  vendors’  gear.  Sun  first 
does  assessment  of  the  customer’s 
hardware  and  software  assets,  generat¬ 
ing  a  total  cost  of  ownership  figure 
along  with  an  estimate  of  potential 
consolidation  savings.  From  there, 
users  can  benefit  from  Sun’s  design 
and  implementation  skills,  says  Tom 
Bankert,  a  Sun  executive. 

Working  with  a  vendor  to  do  a  serv¬ 
er  consolidation  makes  sense,  particu¬ 
larly  for  small  to  midsize  companies 
that  may  not  have  extensive  in-house 
IT  staffs,  says  Philip  Kwan,  a  network 
manager  at  Incyte  Pharmaceuticals  in 
Palo  Alto.  Incyte,  which  has  a  large 
Solaris  and  Linux  network  with 
around  400  servers,  executed  a  con¬ 
solidation  more  than  a  year  ago.  The 
staff  relied  on  advice  from  Sun,  but 
the  program  was  always  under  in- 
house  control. 

Kwan  says  Incyte  started  to  shed 
its  smaller  Solaris  boxes  in  favor  larg¬ 
er  ones  and  clustered  together  its 
Linux  servers  to  improve  scalability. 
The  implementation  allowed  the  net¬ 
work  to  consolidate  50  to  60  Sun 
servers  on  three  larger  boxes,  reduc¬ 
ing  administration  costs  and  increas¬ 
ing  availability. 

But  users  must  remember  that  con¬ 
solidation  isn’t  just  a  technology  issue, 
and  is  not  measured  only  in  dollars 
and  cents,  says  Aberdeen’s  Kernochan. 
Sometimes  users  should  look  at  how 
well  a  consolidation  affects  the  appli¬ 
cations  on  the  business  side. “You  don’t 
want  to  just  stop  at  cost,”  he  says.  S 
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Visionael  Introduces  Enterprise  Software  Solutions 
for  Network  Knowledge  Management 


Whether  your  company  is  going  through  an  evolution 
or  a  revolution  to  compete  in  the  Internet  age, 

Visionael  offers  the  solution. 

In-depth,  end-to-end  knowledge  of  all  elements  of  your 
data  and  voice  networks. 


Seamless  integration  with  network  management 
applications  and  task-specific  tools. 

Network  knowledge  management  solutions  from  Visionael 
give  you  the  information  to  evolutionize  your  business. 

To  learn  more  about  managing  your  network  as  a 


HP  Open  View 


Management 

Connection 


business  asset,  get  your  FREE  Network  Knowledge 
Management  white  paper  today.  Visit  our  website  at 

www.visionael.com  or  call  1-800-833-4962. 


Controlled,  planned  network  evolution. 

Knowledge  that  lets  you  manage  your  network  as  a 
business  asset,  giving  flight  to  your  corporate  vision. 

Identification  of  design  and  workflow  best  practices. 
The  power  to  extend  them  across  the  entire  enterprise 


Worldclass  network  knowledge 
management  solutions 


Copyright  ?  1999  Visionael  Corporation  All  rights  reserved  Visionael  also  partners  with  Remedy,  Tivoli,  Oracle,  and  Cabletron. 

Visionael  is  a  trademark  of  Visionael  Corporation.  Other  company  names  mentioned  in  this  advertisement  may  be  trademarks  of  their  respective  holders 
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Introducing  the 
Gateway"  Solo"  2550  with 
Inter  Pentium"  III  processor 

for  only  $1999. 

it’s  one  powerful  portable  that’s  all  business. 


This  custom-built  Gateway™  portable  is  exactly  what  you’ve  been  looking  for.  Nicely  equipped  with 
an  Intel®  Pentium®  III  processor,  the  Solo®  2550  integrates  CD-ROM,  floppy,  modem  and  superior 
battery  life,  maximizing  portability  and  convenience. 

Call  us  today  and  we’ll  build  one  just  for  you. 


Complete  your  solution  by  choosing  from  thousands  of  business  hardware  and  software  accessories  at  Cateway.com 


CALL 

CLICK 

OR  COME  1  N  TO  A  GATEWAY  BUSINESS 

1-888-888-0779 

www.gateway.com 

Gateway  Country® 

Ad  Code:  000715 
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customers.  Lease  payments  based  on  36-month  term.  Lease  terms  subject  to  change  without  notice  or  obligation. 
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Wired  Windows  .  Dave  Kearns 

A  TALE  OF  TWO  VAULTS 


It  was  the  best  of  times.  Fall,  when 
here  in  the  heart  of  Texas,  the  nights 
are  cooler  and  the  days  are  no  longer 
100-degree  scorchers.  Hockey  season 


had  started  again,  with  better  prospects 
for  my  hometown  Austin  IceBats.  Life 
was  good. 

It  must  have  seemed  that  way  recently 


for  Novell,  also.  Its  DigitalMe  initiative, 
solidly  grounded  in  its  Novell  Directory 
Services  (NDS)  technology,  was  due  to 
launch  at  Internet  World  in  New  York. 
The  consumer  press  was  paying  atten¬ 
tion,  giving  DigitalMe  (www.  digitalme. 
com)  more  play  than  the  competing 
Passport  (www.passport.com)  initiative 


Our  IntraPort™  family  of  VPN  Access  Servers 

wins  more  business  because  it  meets 

industry  standards  and  real  customer  needs: 

■  Integrated  SI_A  monitor 

■  RADIUS,  SecurlD  and  X.509  user  authentication 

*  Broadest  Client  Software  Support- Windows  95, 
98,  NT,  Macintosh,  Linux  and  Solaris  -  at  no 
additional  charge 

■  Fully  IPSec  compliant 

■  Y2K  compliant 

Only  Compatible  Systems  gives  you  this 

much  VPN  scalability: 

■  Remote  access  support  from  64  client 
connections  (IntraPort  2)  to  40,000  connections  at 
more  than  600  Mbps  (IntraPort  Enterprise-8) 

■  LAN-to-LAN  support  from  1 6  to  512  simultaneous 
connections 

■  The  most  complete  and  scalable  VPN  product  line 
available 


Visit  our  website  to  get  your 
complimentary  copy  of  our 
Technical  Evaluators  Guide, 

a  straight-shooting  guide  to  VPN. 

www.compatible.com/evaluate_now/ 


be  us,  Compatible  Systems. 


Since  January,  our  VPN  solutions  have  been 
chosen  by  demanding  organizations  such  as: 

Apple  Computer 

ENTEX  Information  Systems 

Amazon.com 

Motorola 

Jet  Propulsion  Laboratory 
U.S.  Dept,  of  Energy 
Westinghouse 
PSINet 

Pacific  Stock  Exchange 
Yankee  Group 

and  nearly  a  thousand  companies  like  them. 

To  find  out  why,  call  1-800-356-0283,  or  visit 
www.compatible.com/ 


Compatible  Systems 

the  VIRTUAL  leader 


1.888.356.0283  www.compatible.com/ 


IntraPort,  IntraPort  Enterprise  and  IntraPort  Carrier  are  trademarks  of  Compatible  Systems  Corp. 
All  other  product  names  are  trademarks  of  their  respective  manufacturers. 


from  Microsoft. 

Passport  was  launched  very  quietly, 
surprisingly  so  for  Microsoft.  Novell 
launched  DigitalMe  amidst  a  full 
panoply  of  hoopla.  What  happened? 

First,  what  are  these  products?  Pass¬ 
port  and  DigitalMe  purport  to  be  con¬ 
sumer  products,  allowing  consumers  to 
store  identity  information  securely  —  in 
a  so-called  data  vault  —  so  the  informa¬ 
tion  is  available  anywhere  on  the  Web 
from  any  platform.  Logon,  credit  card 
and  shipping  information  are  available 
at  the  click  of  a  mouse  button.  For  Pass¬ 
port,  the  target  Web  site  just  has  to  “Pass- 
port-enable”  itself.  Novell  went  further, 
claiming  no  changes  were  necessary  at 
Web  sites  to  allow  DigitalMe  to  work. 

If  only  it  were  that  easy.  The  morning 
after  the  launch,  DigitalMe  was  down 
for  hours,  supposedly  for  maintenance. 
After  coming  back  up,  users  of  Internet 
Explorer  5  couldn’t  access  the  Web  site. 
The  “mail  to”  link,  to  be  used  for  feed¬ 
back,  worked  only  sporadically.  The 
contact  phone  number  listed  on  the  site 
rang  busy  all  day.  A  link  to  the  support 
site  (nntp:  novell.digitalme)  worked,  but 
no  one  in  the  newsgroup  was  any  better 
informed  than  the  general  public. 

By  the  second  day,  the  bug  blocking 
Internet  Explorer  5  was  fixed,  the  mail 
server  link  was  improved,  and  the  phone 
company  stopped  blocking  calls  to  the 
toll-free  number.  But  the  link  to  the 
newsgroup  was  gone.  Of  course,  the  link 
still  didn’t  work  at  any  of  the  Novell  sites 
requiring  authentication  or  form  fill-in. 

It  was  a  marketing  nightmare.  Mean 
while,  Passport  —  already  accepted  at 
more  than  60  major  consumer  destina¬ 
tions  on  the  Web  —  kept  quietly  working. 

NDS  is  by  far  the  best  technology  for  a 
digital  vault.  It’s  available  on  many  server 
and  client  platforms.  NDS  is  a  mature 
directory  technology  —  just  what  com¬ 
mercial  users  of  the  Web  need.  It’s  too 
bad  it  was  so  poorly  handled  at  launch. 

Kearns,  a  former  network  adminis¬ 
trator,  is  a  freelance  writer  and  con¬ 
sultant  in  Austin,  Texas.  He  can  be 
reached  at  wired@vquill.com. 


Tip . 

Available  now  in 
bookstores  is  Peter 
Norton's  Complete 
Guide  to  Networking. 

The  book  is  a  good  overview  of  net¬ 
work  technologies  and  systems, 
especially  well-geared  towards  the 
newly  certified  CNEs/MCSEs  to  help 
broaden  their  knowledge  of  all  that 
makes  up  an  enterprise  network. 
Peruse  a  copy  at  your  favorite  brick- 
and-mortar  bookstore. 
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Bell  Atlantic  is  rolling  out  its 
Managed  Frame  Access  Service, 
in  which  the  carrier  supplies  and 
manages  Cisco  routers  at  cus¬ 
tomer  sites.  Customers  pay  noth¬ 
ing  upfront  for  the  routers.  The 
service  gives  customers  access 
to  daily  Web-based  reports  on 
availability,  delay,  congestion, 
lost  packets  and  other  factors 
network  managers  need  to 
gauge  to  see  if  their  frame  relay 
networks  are  performing  as  they 
should. 

The  service  costs  $199  to  $560 
per  month,  per  site. 

Bell  Atlantic:  www.bellatlan 
tic.com 

Digital  subscriber  line  service 
provider  Northpoint  Commun¬ 
ications  will  provide  DSL  lines  to 
Pacific  Bell  Internet  Services, 
the  first  time  a  major  regional 
carrier  has  hired  someone  else 
to  deliver  its  DSL  lines. 

Northpoint  will  provision  144K 
bit/sec  DSL  access  lines  that 
PacBell  Internet's  customers  will 
use  to  connect  with  PacBell 
Internet's  points  of  presence. 

The  lines  rely  on  copper  wires 
owned  by  PacBell  Internet's  par¬ 
ent  company,  SBC  Commun¬ 
ications.  Until  now,  PacBell  had 
been  provisioning  lines  for  its 
Internet  division. 

Integrated  access  device  ven¬ 
dor  Premisys  Communications 
has  stepped  up  the  race  to  get 
competitive  local  exchange  car¬ 
riers  (CLEC)  to  install  and  man¬ 
age  IADs  at  customer  premises. 

Premisys  signed  up  big  dis¬ 
tributor  Phillips  Communications 
and  Equipment  Co.  to  market  the 
Premisys  line  —  which  includes 
traditional  time-division  multi¬ 
plexing  as  well  as  ATM  aggrega¬ 
tion  devices  —  to  new  carriers. 
More  than  a  dozen  IAD  vendors 
are  trying  to  sign  up  CLECs  to 
include  their  boxes  in  new  man¬ 
aged  offerings. 


Carriers  &  ISPs 

The  Internet ,  Extranets ,  Interexchange 
anti  Local  Carriers,  Wireless,  Regulatory  Affairs 

PSINet  betting  that  bigger  is  better 


BY  DENISE  PAPPALARDO 

With  jaws  wide  open,  PSINet 
is  biting  off  an  Internet 
expansion  plan  that  will 
either  choke  the  company  or  help  it 
thrive. 

The  Herndon,  Va. ,  ISP  has  announced 
plans  to  expand  its  network  with  physical 
and  wireless  infrastructure,  build  20  new 
data  centers  around  the  world  and  offer 
business  users  an  integrated  global 
Internet  access  service. 

“This  is  the  culmination  of  PSINet’s 
ongoing  buying  spree,  and  its  move  away 
from  low-margin  ISP  business  services,” 
says  Mark  Zohar,  senior  analyst  at 
Forrester  Research,  a  consulting  firm  in 
Cambridge,  Mass. 

In  the  past  20  months,  PSINet  has 
acquired  50  ISPs  from  around  the  world 
to  offer  business  users  a  global  network 
footprint  that’s  unmatched  by  the  likes  of 
UUNET  or  AT&T,  says  William  Schrader, 
PSINet’s  CEO.  PSINet  last  week  marked  its 
50th  ISP  acquisition  with  the  purchase  of 
Zircon  in  Sydney,  Australia.  PSINet  has 
been  secretive  about  how  much  it  has 
spent  on  these  acquisitions,  but  Schrader 
puts  the  total  figure  at  more  than  $1.7  bil¬ 
lion  in  cash  for  all  50  buys. 

While  PSINet  has  been  offering  busi¬ 
ness  users  Web-hosting,  electronic  com¬ 
merce  and  managed  virtual  private  net¬ 
work  (VPN)  services  for  two  to  three 
years,  Zohar  points  out  that  the  ISP  is  bet¬ 


ter  known  as  an  Internet  access  provider 
for  small  to  midsize  customers.  Schrader, 
who  disagrees  with  that  assessment  of 
PSINet,  has  something  different  in  mind 
for  his  company:  becoming  what  he  calls 
an  “Internet  super  carrier.” 

Being  an  Internet  super  carrier  means 
owning  your  own  facilities  and  infra¬ 
structure  around  the  world,  Schrader 
explains.  “Experience  has  taught  us  that 
joint  ventures  with  dim-witted  monopo- 


taught  us  that  joint 
ventures  with  dim- 
witted  monopolies 
just  don't  work." 

William  Schrader,  CEO,  PSINet 


lies  just  don’t  work,”  he  says,  referring  to 
incumbent  local  exchange  carriers  and 
companies  such  as  AT&T,  British 
Telecommunications  or  NTT.  “To  win  in  a 
global  Internet  business  you  need  to  be 
bold  and  strike  out  on  your  own  or  not  at 
all,”  he  says. 

Business  users  should  look  at  PSINet’s 
plans  to  offer  e-commerce  and  Web-host¬ 
ing  services  around  the  world  as  a  posi¬ 
tive  move  because  it  will  offer  them 
another  choice,  but  Zohar  still  questions 
the  long-term  success  of  the  plan. 
Besides  dealing  with  network  integra¬ 
tion  problems  when  interconnecting 
multiple  networks  with  new  dark  fiber, 
PSINet  will  also  be  dealing  with  many 
cultural  issues  with  each  of  its  50  inter¬ 
national  ISP  acquisitions. 

If  PSINet  can  get  through  the  integra¬ 
tion  and  cultural  hurdles,  it  is  still  faced 
with  very  large  expenses.  “PSINet  is  hem¬ 
orrhaging  due  to  huge  quarterly  losses,” 
he  says.  PSINet  reported  net  losses  total¬ 
ing  $57.8  million  last  quarter  and  $58.7 
million  in  the  previous  quarter. 

Schrader  says  becoming  an  Internet 
super  carrier  is  the  only  way  to  succeed 
in  the  long  term,  which  speaks  to  his 
willingness  to  spend  more  than  $1  bil¬ 
lion  on  acquisitions.  PSINet’s  network 
expansion  plans  include  buying  16  dark 
fibers  from  IXC  Communications. This  is 
the  company’s  largest  dark  fiber  acquisi¬ 
tion.  PSINet  plans  to  bring  four  fibers 
See  PSINet,  page  34 


Conceit  bringing  out  new  managed  IP  service 


BY  DAVID  ROHDE 

The  AT&T-backed  international  venture 
Concert  has  launched  a  service  that 
almost  —  but  not  quite  —  amounts  to  a 
global  IP  virtual  private  network  (VPN). 

At  the  recent  Telecom  99  show  in 
Geneva,  Concert  introduced  Concert 
Managed  IP.  The  service  provides  VPN- 
like  any-to-any  capability  to  send  IP  traf¬ 
fic  between  any  two  enterprise  net¬ 
work  sites  but  without  a  public 
Internet  component  for  outside  users 
to  log  on  to  the  network. 

Concert  Managed  IP  employs  Cisco’s 
implementation  of  Multi-protocol  Label 
Switching  in  its  core  routers.  That  way, 
Concert  can  provide  three  service  classes 
between  any  two  network  sites  —  the 


highest  for  latency  sensitive  traffic,  the 
middle  one  for  important  data  transmis¬ 
sions  and  the  lowest  one  for  store-and-for- 
ward  applications  —  without  requiring 
private  lines  or  fast-packet-style  pre-provi- 
sioned  virtual  circuits. 

But  unlike  a  full  VPN  implementation, 
there  is  no  tunneling  or  encryption  all  the 
way  to  the  user  site  or  desktop.  Instead, 
users  have  to  purchase  a  dedicated  frame 
relay  user-to-network  interface,  says  Alex 
Pinnell,  European  marketing  manager  for 
Concert  IP  services. 

As  a  result,  each  site  on  the  network 
must  maintain  a  Concert-managed  Cisco 
router.  Public  Internet  gateways  and  addi¬ 
tional  VPN  security  capabilities  for  purely 
remote  users  will  be  added  to  the  offer 
next  spring,  Pinnell  says. 


Service  availability  also  falls  into  the 
“not  quite”  category.  Concert  is  going 
through  a  transition  from  its  original 
form  —  a  joint  venture  between  MCI 
and  British  Telecommunications,  now 
wholly  owned  by  BT  —  to  a  full-fledged 
stand-alone  carrier  half-owned  by  AT&T 
and  BT  each. 

The  “old”  Concert  continues  to  sell  tra¬ 
ditional  voice,  data  and  Internet  access 
services. The  “new "AT&T-backed  Concert 
—  which  needs  one  more  regulator)' 
approval,  from  the  Federal  Commu¬ 
nications  Commission  —  will  include 
VPN-like  services  like  Managed  IP  but  can¬ 
not  start  until  the  FCC  gives  the  nod. 

Concert  officials  declined  to  give  price 
and  service-level  agreement  details  until 
Managed  IP  comes  onto  the  market.  A 
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HarvardNet  introduces  DSL  VPNs 


BY  TIM  GREENE 

BOSTON  —  HarvardNet  is  wheeling 
out  RemoteConnect,  a  virtual  private 


network  (VPN)  service  for  businesses  in 
the  Northeast. 

Based  on  digital  subscriber  line  (DSL) 
service,  remote  corporate  sites  can  be 


linked  at  speeds  ranging  from  144K 
bit/sec  to  1.5M  bit/sec. 

Remote  sites  will  be  equipped  with 
Paradyne  DSL  gear  and  connect  over  a 
regular  phone  line  to  the  HarvardNet 
network.  The  traffic  will  be  switched  via 
Cisco  ATM  switches  to  a  corporate  head¬ 
quarters  site  over  aT-1  orT-3  link. 


For  a  144K  bit/sec  connection,  cus¬ 
tomers  will  pay  $50  per  month  for  a  one- 
user  site  or  $149  per  site  for  multiple 
users.  Installation  costs  $199  for  a  one- 
user  site  and  $995  for  multiple-user  sites. 

For  sites  that  cannot  be  reached  by 
DSL  because  of  problems  with  the  qual¬ 
ity  of  phone  lines,  HarvardNet  will  make 
connections  via  frame  relay  circuits.  A 
56K  bit/sec  frame  relay  connection 
costs  $219  per  month 

Plymouth  Rock  Assurance  Co.  is  using 
a  DSL  VPN  from  HarvardNet  to  connect 
120  remote  sites  run  by  independent 
insurance  agents.  Plymouth  Rock  is  in 
the  process  of  switching  the  agents  over 
from  a  network  of  dumb  terminals  con¬ 
nected  to  the  company’s  headquarters 
via  56K  bit/sec  frame  relay  connections, 
says  Rich  Wilkins,  vice  president  of  tech¬ 
nology  and  chief  information  officer. 

The  VPN  lets  Plymouth  eliminate  the 
dumb  terminals.  Instead,  agents  use  their 
PCs  and  browsers  to  access  an  Altiga 
tunnel  server  at  corporate  headquarters. 
Client  software  from  Altiga  creates  an  IP 
Security  tunnel  from  the  agent  sites  to 
headquarters. 

The  VPN  service  will  cost  Plymouth 
one-third  of  what  the  frame  relay  service 
costs,  Wilkins  says.That  means  Plymouth 
Rock  can  afford  to  let  more  agents  con¬ 
tact  company  resources  than  before. 

At  144K  bit/sec,  the  VPN  connections 
are  more  than  twice  as  fast  as  frame  relay 
connections.  The  traffic  travels  over  the 
HarvardNet  backbone  and  is  delivered 
to  Plymouth  Rock  headquarters  in 
Boston  over  aT-1. 

HarvardNet  is  planning  on  service- 
level  agreements  that  will  guarantee 
that  network  availability  and  delay  stay 
within  an  acceptable  range,  the  com¬ 
pany  says. 

HarvardNet:  www.harvardnet.com 


PSINet, 

continued  from  page  33 

online  by  the  end  of  2000,  which  will 
equal  nearly  14,000  route  fiber  miles. 
PSINet  also  announced  it  is  deploy¬ 
ing  Nortel  Networks’  dense  wave 
division  multiplexing  equipment  to 
maximize  the  amount  of  traffic  it  can 
support. 

In  an  unconventional  move,  PSINet 
is  also  acquiring  an  11-node  OC-48 
SONET  ring  in  Manhattan  from  an 
unnamed  major  carrier.  This  deal  is 
subject  to  regulatory  approval  and 
will  provide  PSINet  with  direct,  local 
access  to  most  of  Manhattan’s  busi¬ 
ness  users. 

Today,  PSINet  has  two  data  centers 
in  the  U.S.,  but  by  the  end  of  next  year, 
the  ISP  expects  to  have  20  data  centers 
in  locations  such  as  Brazil,  Germany, 
Japan  and  Hong  Kong.  By  the  begin¬ 
ning  of  2000,  PSINet  plans  to  offer  a 
global  Internet  access  service  that  will 
include  one  price  regardless  of  where 
users  are  located.  E 


• 

j  [  LJ  t — J  , 

here’s  no  elbow  room  in  Tl.  But  you’d  pay 
a  fat  price  for  the  luxury  of  T3  services,  if 
you’re  even  offered  the  option. 

The  DL5400  MultiLink  Access  Device  from 
Digital  Link  offers  a  comfy  new  alternative.  It’s 
your  standards-based  multi-megabit  ticket  to  a 
new  level  of  price  performance  for  Internet 
and  frame  relay  access.  NxTl  capabilities  allow 
you  to  scale  bandwidth  to  over  12  Mbps. 

Like  all  of  Digital  Link’s  intelligent  demarc 
solutions,  the  DL5400  MultiLink 
Access  Device  allows  the  enterprise 
to  monitor  performance  across  the 


?  design  which  allows  easy  reconfiguration  for  future  upgrades. 
The  unit  incorporates  web-based  network  management. 


The  low-profile  DL5400  MultiLink  Access  Device  features  a  modular  software  J  f  VOl^VC  21*0  WI1 

and  hardware  design  which  allows  easy  reconfiguration  for  future  upgrades.  *  '  ^ 

uncomfortable  with  second-class 
access  solutions,  visit  www.dl.com  or  call 
888-280-5465  today. 


DIGITAL 
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Global  satellite  communications 
from  COMSAT. 
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Because  a  worldwide  business  operates 
best  when  it’s  on  a  single  network. 

COMSAT  lets  you  cost-effectively  expandyour  network  to  the  entire  world.  Seamlessly. 
And  forget  about  platform  restrictions.  Fully  integrate  IP,  ATM,  Frame  Relay.  ISDN,  and  SS7 
transmissions  with  advanced  technology  and  service  from  COMSAT.  Now you  really  cangoglc 


+  I  301  214  3100  www.comsat.com 
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COMSAT 


Delivering  the  Future .' 
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-"/.THERE  ARE  TWO  SIDES  TO  THIS  WHOLE  CONVERGENCE  BUSINESS.  ONLY  OURS  IS  ALL  TOGETHER  DIFFERENT. 


Carriers 


Wan  Monitor  .  Daniel  Briere  and  Christine  Heckart 


&  ISPs 


Iridium?  Global  One?  What  did  you  expect? 


We  see  dozens  of  new  busi¬ 
ness  plans  each  month  and 
many  ideas  for  solving  problems.  Most 
never  see  the  light  of  day  for  a  good 


reason:  They  stink. 

Still,  it  amazes  us  when  high-flying 
ideas  get  so  much  press  and  financial 
backing  in  this  bull  market  —  no  one 


wants  to  be  left  off  the  next  Yahoo, 
Red  Hat  or  Cerent  bandwagon.  Each 
time,  we  ask  ourselves, “Are  we  dumb? 
Are  we  missing  something  here?”  Nine 


Contact  CACI  Products  Company  today 
to  find  out  how  you  can  save  time  and  money 
with  Application  Profiler  2.0  and  our  other 
network  performance  products. 

3333  North  Torrey  Pines  Court 
La  Jolla,  CA  92037 
(858)  824-5200  PHONE 
(858)457-1184  FAX 

www.caciproducts.com 

acAci 

Products  Company 
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•  Ensure  the  network  provides  the  capacity  the 
application  demands. 

•  Identify  and  solve  software  problems  before  deployment. 

•  Accelerate  response  times  for  multi-tier,  web-based 
applications 

-  Understand  how  latency,  bandwidth,  users,  servers, 
and  utilization  affect  response  time. 

•  Analyze  network  impact  in  time  to  add  new  resources 
or  make  changes. 

•  Examine  traces  from  SAP,  Baan®,  PeopleSoft®,  Oracle®, 
and  others. 


"WHAT  IF”  ANALYSIS 


Deploy  transactions  from  Application  Profiler  2.0 
onto  COMNET  Predictor  to  see  the  interaction 
of  the  transaction  with  the  real  network  and 
live  background  traffic. 


times  out  of  10  (OK,  maybe  eight),  a 
few  years  later,  we  find  that  our  initial 
instincts  were  solid. 

Take  the  present  status  of  Global 
One.  A  recent  Wall  Street  Journal  arti¬ 
cle  called  attention  to  the  fractious 
state  of  the  Deutsche  Telekom  and 
France  Telecom  relationship.  Duh! 
Telecom  managers  who  have  dealt 
with  both  companies  in  the  past 
could  see  this  coming.  In  fact,  when 
the  Sprint,  DT  and  FT  announcement 
was  made,  it  sounded  like  the  start  of 
some  joke:  “OK,  you’ve  got  the  CEOs 
of  Deutsche  Telekom,  France  Telecom 
and  Sprint  at  the  bottom  of  a  well, 
and  they’re  trying  to  decide  how  to 
get  out. ...” 

Then  there’s  Iridium.  Anyone  who 
has  watched  the  intricacies  of  price 
competition  in  the  long-distance  mar¬ 
ket  had  to  question  the  sanity  of  this 
one  from  the  start. There  simply  is  not 
enough  demand  for  $3-per-minute 
calling,  no  matter  where  you  are,  to 
justify  the  business  case.  Ask  the  air¬ 
lines  that  have  been  dropping  voice 
call  rates  to  drive  usage. 

Don’t  get  us  wrong  —  some  people 
will  pay  for  this,  but  will  enough  peo¬ 
ple  sign  up  to  sustain  the  company? 
Nope.  What  was  the  first  warning 
sign?  When  Iridium  had  to  reduce  the 
number  of  satellites  to  66,  thereby 
blowing  the  whole  point  of  naming 
the  company  after  the  element 
Iridium,  which  has  77  protons. 

Is  this  20/20  hindsight?  No,  it’s 
common  sense.  Don’t  lose  sight  of 
common  sense  as  your  firm  seeks  to 
take  advantage  of  the  Internet,  use 
new  technologies  to  solve  problems 
or  enter  new  markets. 

We  tend  to  constantly  second- 
guess  ourselves  as  to  whether  other 
people  are  smarter  when  it  comes  to 
picking  the  winners  in  the  market¬ 
place.  Well,  we  shouldn’t.  Our  initial 
reactions  are  often  correct. 

Many  of  these  newfangled  ser¬ 
vices  and  products  are  bombs 
and  will  never  go  anywhere.  Only 
one  out  of  seven  start-ups  really 
makes  it,  and  that’s  just  counting 
those  that  are  around  long  enough  to 
have  that  assessment  made,  most  ven¬ 
ture  capitalists  say.  When  you  throw 
in  all  the  business  plans  and  ideas 
that  never  got  off  the  ground,  the 
number  is  probably  more  like  one  in 
50,  at  best. 

So  if  something  sounds  stupid,  say 
so!  In  a  few  years,  you’re  likely  to  be 
right  49  out  of  50  times. 

Briere  is  president  and  Heckart  is 
vice  president  of  TeleChoice,  a  con¬ 
sultancy  in  Boston.  They  can  be 
reached  at  dbriere@telechoice.com 
and  cbeckart@telechoice.  com. 
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closer  to  your  users,  offer  new  services,  and  intelligently 
manage  bandwidth.  Flex  more  muscle  with  Entera. 

Empower  your  network. 


Visit  us  online  @  www.entera.com 
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Carriers  &  ISPs  Special  Focus 

Cashing  in  on  Internet 
caching  services 


BY  CAROLYN  DUFFY  MARSAN 

The  IT  staff  at  CNBC.com  had  a  problem.The 

performance  of  their  Web  site  varied  dramatical¬ 
ly  depending  on  where  users  were  located 
around  the  globe.  For  some,  the  pages  popped 
up  instantly.  For  others,  too  many  seconds 
would  drag  on  before  the  financial  headlines, 
photos,  charts  and  stock  ticker  appeared. 

Programming  for  such  a  diverse  user  experience 
was  difficult. 

Enter  Sandpiper  Networks,  a  Thousand  Oaks,  Calif., 
provider  of  Internet  caching  services.  CNBC.com 
struck  a  deal  with  Sandpiper  to  send  its  graphics  — 
which  represent  about  20%  of  the  site’s  content  — 
over  Sandpiper’s  worldwide  network  of  high-speed 
servers.  CNBC.com  serves 
up  the  rest  of  the  content 
itself.  After  relaunching  the 
site  in  June  with  Sandpiper’s 
services,  CNBC.com  was 
able  to  standardize  the  expe¬ 
rience  of  end  users  and 
serve  more  of  them. 

“More  people  get  a  good 
experience  with  the  content 
we  have,”  says  Michael 
Whelan,  who  was  vice  presi¬ 
dent  of  technology  for 
CNBC  and  now  is  a  Teaneck, 

N.J.-based  consultant. “Site 
traffic  is  growing  very  dra¬ 
matically.  Now  we’re  going 
to  look  more  deeply  at  the 
site  architecture  to  see  if 
there  are  other  parts  we  could  change  to  improve 
user  performance  ...  to  see  if  we  could  use  the 
Sandpiper  services  more  effectively.” 

Sandpiper  represents  a  new  breed  of  companies 
offering  Internet  caching  or  content  delivery  services. 
These  companies  —  which  include  Akamai,  Digital 
Island  and  Mirror  Image  —  improve  the  performance 
ofWeb  sites  by  putting  copies  of  the  content  in 
caching  devices  that  are  close  to  end  users. The  end 
users  call  up  the  local  copy  rather  than  pulling  the 
information  from  the  originating  server  located  some¬ 
where  across  the  Internet.The  services  conduct  con¬ 
stant  monitoring  to  keep  the  local  content  up  to  date 
with  the  originating  server. 

Popularized  during  the  last  six  months,  these  ser¬ 
vices  are  used  by  many  of  the  largest  Web  sites  to  han¬ 
dle  embedded  objects  in  Web  pages,  such  as  company 
logos,  ad  banners  and  graphics.They  work  best  for 
content  that  is  served  up  regularly  rather  than  dynam¬ 
ic  content  created  on  the  fly  for  an  end  user.  Another 
popular  use  is  for  the  delivery  of  large  files,  such  as 
software  programs  or  manuals.  These  caching  compa¬ 
nies  also  plan  to  deliver  streaming  video  and  audio 
with  new  offerings  announced  in  recent  weeks. 


'NET  CACHING  SERVICES 

Sandpiper,  Akamai,  SSiyita! 
island  and  the  like  speed 
¥¥elb  content  delivery. 


Internet  analysts  say  these  companies  are  poised 
for  significant  growth.  Internet  caching  services  are 
“going  to  be  one  of  the  biggest  growth  markets  on 
the  ’Net  for  the  next  three  years,”  predicts  A1  Lill,  vice 
president  and  research  director  for  Gartner  Group. 
“It’s  a  virtual  no-brainer.  [For  customers,]  the  risks 


associated  with  these  services  are  so  low.” 

Overall,  the  worldwide  Internet  caching  market, 
including  service  providers,  is  expected  to  grow 
from  $269  million  in  1999  to  nearly  $2.2  billion  in 
2003,  according  to  Internet  Research  Group  of  Los 
Altos,  Calif.  Enterprise  sales  are  expected  to  increase 
from  $110  million  to  $1.4  billion. 

One  reason  for  the  popularity  of  the  services  is  that 
in  addition  to  speeding  the  performance  ofWeb  sites, 
they  also  reduce  bandwidth  costs.  This  is  especially 
true  overseas.  Similar  to  the  telephone  system,  Internet 
caching  services  cut  network  costs  by  serving  content 
locally  rather  than  incurring  a  long-distance  charge. 

The  services  boost  reliability  by  mirroring  a  Web 
site’s  content  on  distributed  servers.  Some  of  the  ser¬ 
vices  use  multiple  ISP  networks,  so  they  can  route 
around  slowdowns  on  the  Internet.  In  addition,  they 
work  with  customers’  existing  caching  hardware  and 
software  products  from  vendors  such  as  Inktomi  and 
Cacheflow. 

Migrating  to  one  of  the  services  is  easy,  users  say. 

It  takes  only  a  few  hours  at  most  for  a  Web  site 
developer  to  do  the  coding  necessary  to  take  advan¬ 
tage  of  caching  services.  And  that  time  should  be 


reduced  as  Web  site  development  tools  add  features 
that  allow  developers  to  build  caching  into  their 
applications. 

Customers  can  roll  out  Internet  caching  services 
gradually,  migrating  graphics  first  and  later  adding 
other  content.  To  help  customers  feel  in  control  of 
their  content,  service  providers  offer  real-time  moni¬ 
toring  tools  and  historical  analysis. The  tools  help 
customers  track  how  many  hits  their  Web  site  is  get¬ 
ting  each  day,  where  the  traffic  is  coming  from  and 
other  trends  that  they  would  watch  if  they  were 
managing  all  of  their  own  content. 

One  concern  Web  site  developers  have  about 
these  services  is  security.  Some  customers  want  to 
apply  cookies  to  content  served  remotely,  while  oth¬ 
ers  want  support  for  passwords  and  digital  signa¬ 
tures  to  ensure  that  only  certain  people  can  view 

documents  replicated 
around  the  world. 

Service  providers  offer 
different  options  when  it 
comes  to  security. 

Security  was  a  major 
concern  for  Finjan  Soft¬ 
ware  of  San  Jose,  which 
uses  Digital  Island’s 
caching  service  to  dis¬ 
tribute  its  security  soft¬ 
ware.  Finjan’s  Web  site 
supports  more  than  30 
software  downloads  per 
day,  with  some  as  big  as 
50M  bytes. 

“We  can’t  afford  to  be 
hacked,”  says  Dave  Kroll, 
director  of  corporate 
marketing. That’s  why  Finjan  tapped  Digital  Island’s 
password  protected  service  to  distribute  upgrades 
and  provide  customer  service.  Finjan  also  benefits 
from  performance  improvements  by  using  the 
Digital  Island  service.  “They’ve  definitely  pruned  off 
seconds  from  the  end  users’  experience,”  Kroll  says. 

Before  Web  site  developers  hand  over  their  con¬ 
tent  to  an  outside  vendor,  CNBC. corn’s  Whelan  rec¬ 
ommends  signing  an  agreement  that  mandates  a 
level  of  quality  of  service  that  is  better  than  they  can 
provide  on  their  own.  “We  were  very  concerned 
about  reliability,  and  we  have  that  built  into  our  ser¬ 
vice-level  agreement, ’Whelan  says. “They  have  to 
serve  the  right  data  and  have  to  do  a  better  job  of 
serving  that  data  than  we  could  in  terms  of  speed.” 

Although  caching  services  are  used  mainly  for 
Internet  applications,  analysts  see  great  potential  for 
the  technology  in  intranets  and  extranets.  “As  new 
e-business  applications  roll  out,  as  businesses  up¬ 
grade  to  Office  2000,  and  as  HTML  traffic  booms  on 
corporate  intranets  and  extranets  over  the  next  five 
years,  we  expect  caching  applications  within  enter¬ 
prises  to  grow  significantly,”  states  a  report  from  the 
Internet  Research  Group.  E 


Internet  caching/content  delivery  services 

A  sampling  of  some  companies  that  are  delivering  the  new  service: 

Company 

Akamai 

Digital  Island 

Mirror  Image 

Sandpiper 

Location 

Cambridge,  Mass. 

San  Francisco 

Woburn,  Mass. 

Thousand  Oaks,  Calif. 

Service 

FreeFlow 

Content  Distribution  Service 

Central  Cache  Connection 

Footprint 

Founded 

1998 

1995 

1998 

1996 

Network 

1 ,200  servers, 

40  networks, 

24  countries 

Servers  N/A, 

5  data  centers, 

21  countries 

39  servers, 

4  central  cache  sites, 

3  countries 

500+  servers, 

30  networks, 

1 5  countries 

ij  Customers 

Yahoo!,  CNN,  J.Crew, 
Apple,  InfoSeek 

E-Trade,  Bell  &  Howell, 
Payment.Net,  Candle 

BBC,  SpringNet,  JTM 
Multimedia,  Rocket  Networks 

ElOnline,  LA  Times,  Intuit, 
CNBC.com 

Web  address 

www.akamai.com 

www.digitalisland.com 

www.mirror-image.com 

www.sandpiper.com 
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WHILE  EVERY  OTHER 
ICT  SERVICE  COMPANY 
WAS  OUT  THERE 
LOOKING  FORA  NEW 

OPPORTUNITY 

WE'VE  CREATED  #NE... 


In  todays  quick-paced  world  of  Information  and  Communication  Technology  (ICT),  we  found  the  best 
way  to  be  ready  for  change  was  by  making  changes  ourselves.  In  July,  we  merged  the  strengths  of 
Getronics  and  Wang  Global  to  form  one  of  the  world’s  top  technology  solutions  and  services  companies. 
In  doing  so,  we’ve  become  34,000  employees  strong  across  44  countries.  How  strong?  In  just  the  first 
half  of  1999,  our  net  earnings  increased  by  57%  and  earnings  per  share  were  up  more  than  53%. 
So,  now  that  we’ve  made  our  changes,  we’re  ready  to  handle  yours,  www.getronics.com 


Free  Product  info  enter  NWInfoXpress  #114  online  @  www.networkworld.com/infoxpress 


Mow  more  than  ever,  you  need  the 

most  advanced  and  powerful  network 
management  software  you  can  find. 
That's  why  so  many  network  managers 
today  are  switching  to  Network/7™  Pro. 

Because  it  gives  you  total  control — exactly 
what  you  need  to  deliver  the  quality  of  service 
your  users  have  all  been  demanding. 

Not  only  can  you  identify  the  impact  net¬ 
work  problems  have  on  your  business,  you  can 
resolve  them  before  users  are  ever  affected. 
Network/TPro  optimizes  performance,  provides 
enhanced  manageability,  and  dramatically 
reduces  downtime. 

It  also  provides  substantially  more  func¬ 
tionality  than  any  other  network  management 
solution.  Whether  it’s  ATM,  Frame  Relay  or 
Switch,  TCP/IP  or  IPX,  DECnet  or  SNA, 
Network/TPro  gives  you  a  consistent  way 
to  manage  your  entire  network,  across  any 
platform,  protocol,  or  network  operating  system. 


2- D  Map 

3- D  Real  World  Interface™ 
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Active  Object  Repository 
Agent  View/Manager 
Automatic  Baseline  Calculation 
Automatic  DHCP  Synchronizer 
Built-In  RMON  Analysis 
usiness  Process  Views™ 
Discovery  Wizard  And  Live  Status 
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Distributed 
DSM  Configuration  Wizard 
DNS  Discovery 
Event  Management 

Built-In  Customizable  Event  Correlation 
Frame  Relay  Option 
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Shared  Calendar  Objects 
Switch  Management  Option 
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Network/ZPro  views  your  entire  network  from  a  business 
perspective. 


And  with  its  centralized, 
policy-based  approach, 
aligning  network  management 
to  business  objectives  has 
finally  become  a  reality. 

Best  of  all,  Network/T 
Pro  is  part  of  CA’s  family 
of  acclaimed  management 
products  built  on  a  common 


framework.  So,  as  your  role  evolves  to  encompass  other  enterprise  require¬ 
ments,  you  can  incrementally  implement  additional 

solutions  in  an  integrated  fashion.  Just  what 
you  would  expect  from  the  industry  leader  in 
network  and  systems  management. 

To  change  your  network  management 
point  of  view,  visit  our  website  at 
www.cai.com/ads/networkitpro  or 
call  1-877-2  GO  FOR  IT. 


( Computer ® 

ei  SSOCIATES 

Software  superior  by  design. 


E>1 999  Computer  Associates  International,  Inc.,  Islandia,  NY  11788-7000.  All  product  names  reterenced  herein  are  trademarks  of  their  respective  companies.  ‘Based  on  HP  OpenView  Network  Node  Manager  v6.0  as  of  3/31/99. 
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Enterprise 


Concord  Communications  this 
week  announced  it  will  merge 
with  Empire  Technologies,  com¬ 
bining  Empire’s  system  and  appli¬ 
cation  management  tools  with 
Concord's  performance  manage¬ 
ment  software.  The  merger,  val¬ 
ued  at  over  $31  million,  will  allow 
Concord  to  combine  real-time 
information  about  Windows  NT 
and  Unix  servers  with  Concord's 
historical  information.  It  will  also 
provide  Concord  with  a  software 
agent  that  runs  on  those  servers 
and  takes  corrective  action  when 
server  problems  crop  up. 

MessageWise  is  offering  an 
Exchange  2000/Windows  2000 
readiness  program  based  on  its 
InLook  network  auditing  and  con¬ 
figuration  management  tool. 

The  program  provides  a  com¬ 
plete  inventory  of  an  enterprise's 
Exchange  and  NT  servers,  includ¬ 
ing  software,  version  levels  and 
configuration  settings.  The  inven¬ 
tory  includes  information  on  Ex¬ 
change  directories  such  as  con¬ 
nector  settings  and  routing  tables. 

The  service  is  available  now, 
and  pricing  starts  at  $1,000. 

MessageWise:  www.message 
wise,  com 

Covalent  of  Lincoln,  Neb.,  is 
making  it  easier  for  network  man¬ 
agers  to  run  the  open  source 
Apache  Web  Server  by  offering 
several  support  options  designed 
for  large  enterprises.  Customers 
can  choose  from  three  levels  of 
support:  24-7  phone  and  e-mail 
support  costs  $60,000  per  year; 
business-hours  support  by  phone 
and  e-mail  costs  $30,000  per  year; 
and  e-mail  support  costs  $1,000 
for  12  incidents  and  $1,700  for  24 
incidents.  The  software  runs  on 
four  million  machines. 

Covalent  is  first  to  offer  pack¬ 
aged  support  for  Apache,  says 
Randy  Terbush,  the  company's 
chief  technology  officer. 

Covalent:  www.covalent.net 


Obstacles  remain  for  'Net  billing 

But  companies  are  confident  that  electronic  hills  will  pay  off  once  more  customers  embrace  them. 


BY  ELLEN  MESSMER 

Consumers  are  increasingly  will¬ 
ing  to  pay  their  monthly  bills 
electronically  over  the  Internet, 
eliminating  the  old  excuse  “the  check  is 
in  the  mail.” 

This  should  mean  dramatically  lower 
costs  for  the  telephone,  utility  and  other 
companies  issuing  monthly  bills.  Internet 
bills  generally  cost  billers  about  50  cents 
or  less  to  process,  whereas  it  typically 
costs  at  least  twice  that  for  traditional  bill 
processing,  which  involves  printing  and 
postage  charges. 

But  while  consumer  support  for 
Internet  billing  is  on  the  rise,  billers  still 
need  a  lot  more  customers  to  embrace 
the  concept  before  the  billers  can  break 
even  on  their  Internet  billing  invest¬ 
ments.  Worse,  there’s  no  standard  for  get¬ 
ting  billing  information  out  of  the  biller’s 
back-end  system,  usually  a  mainframe,  in 
order  to  present  it  in  full  detail  on  the 
Web  for  payment. 

That  means  the  biller  may  take  one 
technical  approach  to  post  a  consumer’s 
bill  at  its  Web  site,  if  the  consumer  wants 
to  pay  the  bill  there.  But  if  a  consumer 
wants  to  review  and  pay  the  bill  at  other 
points  on  the  Web,  say  at  a  bank’s  Web  site 
or  Yahoo,  the  biller  has  to  get  that  con¬ 


sumer’s  billing  data  over  to 
those  points,  too. 

In  the  nascent  bill-payment 
industry,  two  players  are  strong 
enough  to  dictate  to  the  billers 
the  technology  they  must  use. 

One  company  is  TransPoint, 
which  has  a  Web  site  for  aggre¬ 
gating  all  a  consumer’s  bills  so 
they  can  be  paid  at  one  time. 

The  other  is  CheckFree,  which 
operates  as  a  facilitator  between 
a  Web  site  posting  the  bill  and 
the  biller  providing  the  content. 

The  lack  of  a  common  standard  puts 
pressure  on  companies  that  want  to  pro¬ 
vide  online  bill  payment  for  customers. 

“In  the  short  term,  Internet  billing  is 
not  a  cost  savings  because  of  the  cost  to 
get  it  going,”  says  Gary  Wright,  manager 
of  IS  at  Central  Hudson  Gas  &  Electric, 
which  this  month  made  its  bills  available 
via  TransPoint.  Earlier  this  year,  the  utility 
made  its  billing  data  available  to 
CheckFree. 

To  handle  the  different  technical  de¬ 
mands  from  TransPoint  and  CheckFree,  the 
utility  called  in  a  bill-payment  service 
bureau,  BillServ,  to  take  a  simple  flat  file 
from  Central  Hudson  and  make  it  available 
each  way  the  bill  aggregators  wanted  it. 

“TransPoint  is  a  more  proprietary  type 


of  data  exchange  using  a  lot  of 
Microsoft  tools,  while  Check- 
Free  is  more  like  electronic 
data  interchange, ’’Wright  says. 

TransPoint  is  a  venture  be¬ 
tween  Microsoft,  First  Data  and 
Citicorp  that  posted  the  first 
consumer  bills  on  its  Web  site 
for  payment  in  April.  Trans- 
Point’s  goal  is  to  aggregate  a 
consumer’s  bills  so  a  person 
can  pay  all  his  bills  at  one  Web 
site  rather  than  have  to  jump 
around  from  site  to  site. 

TransPoint  relies  on  the  billing  com¬ 
pany  to  install  what  it  calls  the  Biller  Inte¬ 
gration  System  to  upload  bills,  usually 
from  a  mainframe  to  a  TransPoint  server 
in  Seattle.  There,  TransPoint  posts  the 
monthly  bills  for  its  subscribers  —  the 
service  is  free  to  bill  payers. 

Archrival  CheckFree  works  under  a 
totally  different  model.  CheckFree  oper¬ 
ates  as  an  intermediary,  providing  “spon¬ 
sors”  (companies  interested  in  posting 
consumer  bills,  usually  the  banks)  with 
monthly  statements  made  available  by 
the  biller’s  back-end  system  via  a  Web 
application  server.  Unlike  the  TransPoint 
model,  with  CheckFree  the  billing  com¬ 
pany  doesn’t  have  to  regularly  blast  out 
See  Payments,  page  46 


TransPoint's  Lewis 
Levin:  Getting  big 
billers  online  is  an 
uphill  climb. 


Start-up  offers  open  authentication  system 


BY  CAROLYN  DUFFY 
M ARSAN 

VIENNA,  VA.  —  If  you’re  spending  too 
much  of  your  staff  time  and  budget  man¬ 
aging  passwords,  tokens  or  other  authen¬ 
tication  methods,  consider  the  latest 
offering  from  BioNetrix.  The  start-up  is 
offering  a  software  package  that  provides 
an  open  platform  for  managing  different 
types  of  authentication. 

The  software  can  help  companies 
migrate  to  password  alternatives  such  as 
biometrics.  In  addition,  BioNetrix  officials 
say  the  company’s  client/server  software 
package  can  reduce  password  administra¬ 
tion  costs  by  as  much  as  30%.That’s  a  sig¬ 
nificant  savings  for  large  enterprises, 
which  spend  as  much  as  $340  per  year, 
per  user  on  resetting  passwords,  accord¬ 
ing  to  Gartner  Group,  an  IT  consultancy 


in  Stamford,  Conn. 

The  BioNetrix  Authentication  Suite  lets 
network  managers  set  up  and  administer 
all  authentication  systems  in  the  enter¬ 
prise  from  one  console.The  software  sup¬ 
ports  passwords,  smart  cards,  tokens,  digi- 
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nline 


Body  language 


Get  briefed  on  biometrics  online: 

•  An  update  on  the  government's 
standards  and  research  activities. 

•  A  free  newsletter  about  biometrics 
products. 

•  The  history  of  biometrics. 


tal  signatures,  fingerprint  scanners,  retina 
scanners,  and  face  and  voice  recognition 
systems.  It  can  integrate  with  enterprise 
software  applications  from  SAP,  People- 
Soft,  Lotus,  Oracle  and  Check  Point.  The 
BioNetrix  software  can  be  managed  from 
a  single  console  or  distributed  across  sev¬ 
eral  machines  to  avoid  a  single  point  of 
failure. 

The  BioNetrix  Authentication  Suite 
consists  of  three  parts: 

•  BioClient,  which  resides  on  the  desk¬ 
top  and  communicates  with  the 
BioServer  software  for  authentication 
management.  It  runs  on  Windows  plat¬ 
forms,  but  a  Unix  version  is  due  out 
early  next  year. 

•  BioServer,  which  resides  on  the 
server  and  handles  authentication 
needs  for  enterprise  applications.  It 
runs  on  Windows  NT,  but  Unix  and 
Linux  versions  are  due  out  early  next 
year. 

•  BioPolicy  Engine,  which  also  resides 

See  BioNetrix,  page  46 


Network  World  October  25,  1  999  www.nwfusion.com  43 


Cable  &  Wireless’  IP  VPN 


One  business  decision  that  won’t  make  any  sense 


it  all  to  your  competitors 


Whether  you’re  establishing  or  expanding 
an  intranet  or  an  extranet,  secure  networks 
are  vital  to  the  success  of  any  business. 
That’s  why  we’ve  developed  one  of  the 
most  secure,  sophisticated  and  economical 
IP-based  Virtual  Private  Networks  on 
the  market  today. 

Cable  &  Wireless’  IP  VPN  includes 
our  Managed  Firewall  Service.  This  will 
protect  all  your  data  communications 
with  unforgiving  end-to-end,  tunneled 
encryption  provided  by  Check  Point 
Software  Technologies,  Inc7  So  no  matter 
what  you  communicate,  your  competitors 
will  have  access  to  nothing  but  totally 
encrypted  nonsense. 

And,  as  our  IP  VPN  runs  on  one  of  the 
fastest  backbones  on  the  planet,  your 
network  will  also  benefit  from  an 
extremely  reliable,  scalable  and  global 
Internet  connection. 

Cable  &  Wireless’  IP  VPN.  It’s  just  another 
way  we’re  delivering  net  results. 


Visit  us  at  www.cwusa  .com 


Free  Product  info  enter  NWInfoXpress  #106  online  @  wvw.networkworid.cam/inie; 
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Mission  Critical  bolsters  NT  management  wares 


OnePoint  Operations  Manager  simplifies  the  management  of  Windows  NT  servers  and  applications. 


BY  JOHN  FONTANA 

HOUSTON  —  Scalability,  reli¬ 
ability  and  availability  are  on 
the  minds  of  IT  executives 
using  more  and  more  Windows- 
based  servers.  Mission  Critical 
Software  is  trying  to  ease  these 
concerns  with  a  one-stop  tool 
to  manage  Windows  NT  and 
2000  servers  and  the  applica¬ 
tions  running  on  them. 

Mission  Critical’s  OnePoint 
Operations  Manager  recently 
began  shipping  as  the  newest 


addition  to  the  company’s 
OnePoint  suite  of  administra¬ 
tive  software. 

A  key  to  Operations  Manager 
is  a  set  of  ActiveAgents,  which 
run  on  each  server.  On  the 
application  side,  the  agents  fol¬ 
low  a  set  of  rules  to  monitor 
critical  application  compo¬ 
nents  to  ensure  the  applica¬ 
tions’  integrity.  The  agents  also 
can  monitor  application  perfor¬ 
mance,  such  as  the  time  it  takes 
two  Exchange  servers  to  swap 
mail,  to  ensure  service  levels. 


On  the  server  side,  the  agents 
can  assess  the  health  of  server 
hardware,  and  monitor  event 
logs,  flat  files  and  the  Windows 
Management  Interface  to  look 
for  problems  such  as  jammed 
print  queues. 

Monitoring  Windows-based 
systems  is  key  as  corporations 
deploy  more  Windows  devices 
in  their  nets.  Companies  such 
as  Net  IQ,  BMC  Software  and 
Heroix  also  are  trying  to  fill 
NT  management  needs. 

“Enterprises  are  becoming 


more  dependent  on  NT  apps 
like  Exchange,  and  they  want 
them  up  at  all  times,”  says 
Phillip  Mendoza,  an  analyst 
with  International  Data  Corp., 
a  market  research  firm  in 
Framingham,  Mass.  “The  key 
selling  point  with  Mission 
Critical  is  quickness,  since 
monitoring  can  eat  up  CPU 
speed.  The  way  Operations 
Manager  monitors  is  more 
database-oriented  than  script- 
oriented,  and  that  is  more  effi¬ 
cient.  But  this  tool  is  for  pure 


NT  deployments;  in  a  mixed 
environment  you  may  need 
another  tool.” 

Operations  Manager  has 
three  different  console  inter¬ 
faces,  including  a  Web  inter¬ 
face,  which  can  be  customized 
based  on  the  duties  and 
authority  levels  of  individual 
administrators. 

Operations  Manager  is  avail¬ 
able  now  and  priced  at  $1,500 
per  managed  NT  or  2000  server. 

Mission  Critical:  www.mis 
sioncritical.com 


Payments, 

continued  from  page  43 

large  volumes  of  data.  But  the 
billing  company  is  required  to 
provide  a  view  of  the  billing 
information  on  an  application 
server  accessible  through 
CheckFree’s  security  token 
and  certificate  technology. 

Last  month,  Yahoo  started  a 
bill-payment  service  based  on 
CheckFree,  adding  momentum 
to  what  some  researchers 
claim  will  be  a  tidal  wave  of 
online  bill  paying  in  the  future. 

One  research  firm,  Killen  & 
Associates,  estimates  that  out 
of  61  billion  bills  worldwide, 
1.8  billion  are  paid  monthly 
via  the  Internet.  Forrester 
Research  figures  that  three 
million  households  use  elec¬ 
tronic  bill  payment  today,  and 
that  the  number  will  quintuple 
by  2002. 

With  these  prospects  in 
sight,  the  banking  industry  is 
pushing  for  a  bill  payment  and 
presentation  standard  that 
would  rely  on  XML  for  translat¬ 
ing  bill  information  into  a  com¬ 
mon  format.  The  Banking 
Industry  Technology  Secret¬ 
ariat  (BITS) — the  high-tech 
think  tank  that’s  part  of  the 
Financial  Services  Round¬ 
table  —  says  the  standard  will 
be  completed  later  this  fall. 

However,  that  may  not  be  in 
time  for  members  of  Spectrum 
EBP,  a  joint  venture  involving 
Chase  Manhattan,  First  Union 
and  Wells  Fargo.  The  firms  are 
just  about  ready  to  start  sharing 
billing  data  via  the  Internet. 

Banks  earn  revenue  from  pay¬ 
ment  processing,  and  they  want 
to  ensure  that  this  revenue 
stream  is  not  eliminated  as  more 


The  check  is  in  the  e-mail 

Analysts  predict  that  most  bills 
will  be  paid  electronically  in  the 
next  several  years,  saving  money 
for  individuals  and  companies. 

1938  ^ —  Bills  paid  via  mail 

or  in  person:  97% 

Bills  paid 

■  electronically:  3% 

Total  bills:  61  billion 

Per-bill  cost  for  mailed  checks  in  1 998:  $2.25 
Per-bill  cost  for  electronic  payments  in  1998: 

50  cents 


2005 


Bills  paid  via  mail 
or  in  person:  30% 


Bills  paid 

electronically:  70% 


Total  bills:  80  billion 


SOURCE:  KILLEN  &  ASSOCIATES.  PALO  ALTO 


bills  get  paid  on  the 
’Net. 

“We  have  over  300 
million  bills  between 
the  three  of  us,”  says 
June  Felix,  senior  vice 
president  at  Chase 
Manhattan,  who  em¬ 
phasizes  that  building 
a  foundation  for  inter¬ 
operability  in  sharing 
bills  is  paramount  to 
the  banks.  “We  agree 
on  operating  rules, 
and  we  think  it’s  im¬ 
portant  this  be  open 
and  interoperable.” 

Banks  pay  Check- 
Free  a  fee  for  each 
consumer  paying  his 
bills  online,  says  Lynn 
Busing,  executive  vice 
president  at  Norcross, 

Ga.-based  CheckFree. 

Busing  says  CheckFree 
has  three  million  con¬ 
sumers  using  its  ser¬ 
vice  via  350  financial 
institutions. 

CheckFree  serves  about  40 
billers  that  distribute  their  bills 
electronically.  The  companies 
include  First  Union,  Schwab, 
BellSouth,  AT&T,  MCI  World¬ 
Com  and  Qwest.  MCI  World¬ 
Com,  meanwhile,  this  month 
announced  it  also  will  provide 
bills  via  TransPoint. 

Ken  Hobday,  CheckFree’s 
vice  president  of  standards,  co¬ 
chairs  the  BITS  working  group 
on  the  proposed  XML-based 
bill-payment  standard  (called 
IFX).  But  he  is  not  sanguine  IFX 
will  be  adopted  quickly. 

“Standards  are  important,  and 
CheckFree  is  committed  to 
them,”  Hobday  says.  “But  Check- 
Free  should  not  be  constrained 
in  a  fast-moving  industry.”  Bill 


presentment  is  new,  and  “codify¬ 
ing  the  business  rules  constrains 
what  people  can  do,”  he  adds. 

“As  the  industry  grows,  it 
would  be  wonderful  to  have  a 
way  to  exchange  these  bills,” 
Hobday  says. 

TransPoint  only  has  “a  few 
subscribers  now”  and  less 
than  100  billers,  with  only  25 
live  on  the  system,  says  Presi¬ 
dent  and  CEO  Lewis  Levin.  He 
acknowledges  it  will  be  an  up¬ 
hill  climb  to  get  a  nationwide 
roster  of  the  biggest  billers  on 
board  in  order  to  make 
monthly  bills  available  to  con¬ 
sumers  in  volume. 

“Everyone  agrees  IFX  is  the 
right  idea,”  Levin  says. “But  even 
after  you  agree,  it  takes  a  while 
for  it  all  to  come  together.”  3 


BioNetrix, 

continued  from  page  43 

on  the  server  and  lets  the  net¬ 
work  manager  set  authentica¬ 
tion  policies  for  applications, 
workgroups  and  individuals. 
Policies  can  change  depending 
on  whether  the  employee  is  in 
the  office  or  working  remotely. 

BioNetrix  is  targeting  four 
markets  for  the  software:  finan¬ 
cial  services,  pharmaceuticals, 
government  and  utilities. 
Although  the  software  is  just 
being  announced,  it  has  been 
tested  in  pilot  projects  over  the 
past  several  months  and  is  cur¬ 
rently  inversion  3  0. 

One  user  of  the  suite  is 
drugemporium.com,  the  elec¬ 
tronic  commerce  arm  of  Drug 
Emporium,  Inc.,  a  pharmacy 
chain.  The  Web-based  sub¬ 
sidiary  is  testing  an  application 
that  puts  pagers  with  built-in 
fingerprint  scanners  in  the 
hands  of  physicians  and  allows 
them  to  order  prescriptions 
over  the  Internet.To  meet  state 
regulations,  the  system  must 
ensure  confidentiality  of  the 
information  as  well  as  biomet¬ 
ric  verification  of  the  doctor 
and  the  pharmacy. The  Web  site 
is  using  the  BioNetrix  software 
to  handle  the  authentication 
for  the  system,  says  Matthew 
Erick,  director  of  pharmacy 
operations. 

“In  picking  BioNetrix,  we 
felt  they  had  one  of  the  best 
devices  to  ensure  security,” 
Erick  says.  “The  system  allows 
us  to  identify  that  the  prescrip¬ 
tion  was  received  by  a  licensed 
pharmacy  and  that  the  doctor 
is  who  he  says  he  is.” 

Erick  says  the  BioNetrix  soft¬ 
ware  offers  flexibility  in  terms 


of  the  biometric  devices  it  sup¬ 
ports.  “There’s  not  just  one  com¬ 
ponent.  It  supports  fingerprint 
or  retinal  scanning,  so  we  can 
meet  different  requirements  in 
different  states,”  he  adds. 

The  BioNetrix  Authentica¬ 
tion  Suite  costs  about  $50  per 
user.  A  Biometric  Starter  Kit, 
which  sells  for  $2,500,  features 
the  BioNetrix  authentication 
software  as  well  as  two  finger¬ 
print,  voice  and  face  recogni¬ 
tion  devices. 

Until  now,  2-year-old  Bio¬ 
Netrix  has  been  operating  in 
stealth  mode,  formally  launch¬ 
ing  itself  and  its  product  this 
month.  Nonetheless,  it  has 
attracted  the  attention  of  secu¬ 
rity  luminaries.  Steve  Walker, 
founder  of  Trusted  Information 
Systems,  sits  on  the  company’s 
board  of  directors,  as  does 
Cybercash  founder  Bill  Melton. 

BioNetrix  appears  to  have 
carved  out  a  hot  niche.  Frost  & 
Sullivan,  a  Mountain  View,  Calif. , 
market  research  firm,  estimates 
the  user  authentication  and  bio¬ 
metric  market  will  nearly  triple 
between  now  and  2002,  when 
the  market  is  expected  to  be 
worth  more  than  $4  billion. 
Software  such  as  the  BioNetrix 
Authentication  Suite  is  expect¬ 
ed  to  become  more  attractive 
to  enterprise  customers  as  bio¬ 
metric  devices  become  inte¬ 
grated  in  standard  computer 
keyboards  and  laptops. 

“We  think  that  in  three  to  five 
years,  biometric  devices  are 
going  to  be  fairly  pervasive,”  says 
Pete  Bianco,  co-founder  and 
CEO  of  BioNetrix.  Bianco  says 
BioNetrix’  software  suite  “allows 
users  to  migrate  to  the  future.” 

BioNetrix:  www.  bionetrix. 
com 
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If  you  have  a  dynamic  business  like  the  Duncan  Coffee  Company,  you  need  a  network  that  helps 

J  "teT"et  you  -  uh  -  roast  the  competition.  That’s  why  at  Nortel  Networks™  we  provide  small-  to 

Telephony 

medium-sized  businesses  like  yours  with  a  complete  line  of  voice  and  data  solutions. 

In  fact,  we're  your  one-stop  source  for  putting  together  a  Unified  Network  that 
offers  the  benefits  of  converging  voice  and  data  networks  and  helps  you  take  advantage  of  the  new, 
high-performance  Internet.  For  instance,  new  releases  of  Nortel  Networks  BayStack,  the  Norstar 
Integrated  Communications  Systems  and  our  new  Enterprise  Edge  solution  are  like  a  double 
shot  of  espresso  for  your  business.  So  come  together,  right  now  with  Nortel  Networks. 

And  make  the  Internet  whatever  you  want  it  to  be.  nortelnetwoTks.com/go/16LA 


NlQRTEL 

NETWORKS 


How  the  world  shares  ideas. 


Nortel  Networks.  Unified  Networks.  Norstar.  Baystack,  the  Nortel  Networks  logo,  the  Globemark  and  “How  the  world  shares  ideas."  are  trademarks  of  Nortel  Networks. 
"What  do  you  want  the  Internet  to  be?"  is  a  service  mark  of  Nortel  Networks  ©1999  Nortel  Networks  All  rights  reserved. 
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want  the  Internet  to  be? 


What  do 


Owner,  Duncan  Coffee  Company 


Enterprise  Applications 


'Net  insider  .  Scott  Bradner 


Protecting  against  knowledge 


Sf  you  have  a  sensitive  nature,  you 
should  not  read  this  column. 
According  to  the  Internet  gateway 
manager  at  a  large  international  com¬ 


pany,  this  column  contains  a  word  that 
is  “abusive.” 

I’m  managing  an  IETF  mailing  list 
(www.ietf.org/mailman/listinfo/raven) 


that’s  looking  into  what  the  IETF 
should  do  if  we  are  faced  with  a 
request  to  add  legal  intercept  (wiretap¬ 
ping)  functions  to  IETF  protocols.  As 


*TOWN  * 
MEETING 


Storage  used  to  be  so  easy.  Sure,  files  grew 
pretty  fast,  but  a  few  more  big  drives  usually 
licked  the  problem.  Now  video,  animation, 
images,  rich  documents  and  HTML  are  all 
overloading  your  best  laid  storage  plans.  And 
it's  only  going  to  get  worse.  You  need  to  think 
about  your  storage  needs  and  capabilities  in  a 
new  way  —  a  strategic  way. 

Attend  this  FREE  SEMINAR  and  you'll  be 
two  steps  ahead  of  the  competition  by: 

•  Learning  about  the  stress  that  the  rapid  growth 
in  storage  is  putting  on  your  IT  staff,  and  why 
business  as  usual  just  won't  cut  it 

•  Finding  out  how  a  storage-centric  plan 
can  boost  your  entire  IT  infrastructure 

•  Discovering  the  key  criteria  — •  scalability, 
flexibility,  robustness,  and  manageability 
—  that  should  guide  the  storage  decision¬ 
making  process 

•  Learning  what  products  and  services  are 
available  today  that  can  help  you  build  a 
storage  system  for  tomorrow 

•  Quizzing  key  vendor  executives  about 
product  features  and  plans  for  the  future 

«  Figuring  out  which  vendors  are  most  in 
sync  with  your  long-range  storage  needs 


Moderators 

Doug  Barney,  Executive  Editor  of  News, 
Network  World 

David  Hill,  Senior  Analyst,  Storage  and 
Storage  Management,  Aberdeen  Group 
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the  list’s  manager,  I  get  sent  copies  of 
any  messages  concerning  delivery 
problems  the  mailing  list  finds. 

The  other  day  I  received  the  follow¬ 
ing:  “This  message  was  rejected  and 
nondelivered  by  our  Internet  Mail 
Gateway  [this  scans  all  incoming  and 
outgoing  Internet  messages] .  The  mes¬ 
sage  was  rejected  because  of  abusive 
or  offensive  content.  Please  reword  the 
message  and  resend  it.” 

I  exchanged  mail  with  the  gateway’s 
manager,  and  after  searching  the  mail¬ 
ing  list  archives  I  determined  that  the 
rejection  was  because  of  this  para¬ 
graph  from  someone  who  did  not  like 
the  idea  that  the  IETF  might  develop 
protocols  with  wiretapping  functions: 

“If  the  Federates  [sic]  want  to  develop 
such  an  application,  let  them  do  it.  I’m 
certainly  not  about  to  commit  time  and 
money  developing  an  application 
and/or  hardware  interface  that  benefits 
THEM!  Isn’t  that  why  they  take  40%  of 
my  paycheck  each  week,  so  that  they 
have  money  to  piss  away  on  stupid  stuff 
like  that?” 

The  gateway  manager  said:  “We  do  a 
general  check  for  abusive  words,  not  a 
context  search.  If  any  abusive  words 
are  found,  the  e-mail  is  stopped  either 
going  out  or  incoming.  Our  users 
accept  this  limitation  and  are  happy  to 
remain  within  [sic]  it.”  Due  to  the  out¬ 
bound  filter,  the  gateway  manager  had 
to  type  the  offending  word  on  four 
lines  with  one  character  each. 

Because  the  IETF  mailing  list  soft¬ 
ware  automatically  unsubscribes  any 
entry  that  causes  a  bounce,  the  sub¬ 
scriber  at  this  company  is  no  longer 
receiving  postings  from  the  list.  The 
company  policy  has  protected  him 
from  what  the  company  sees  as  abuse 
—  as  well  as  from  the  important  dis¬ 
cussion  taking  place  on  the  mailing  list. 

I  can  see  why  a  company  might 
want  to  filter  language  in  outgoing  mail 
that  in  one  way  or  another  might  harm 
the  company  or  its  image.  Simple  word 
scans  will  not  catch  misstatements  of 
fact  that  are  the  most  likely  to  harm  the 
company,  but  flagging  deeply  offensive 
language  is  an  understandable  protec¬ 
tion.  But  extending  this  to  blocking 
incoming  mail  containing  a  word  that 
some  5-year-olds  use  comfortably  is 
more  depressing  than  anything  else. 

This  company  demonstrated  a  mis¬ 
trust  of  its  employees  that  is  impressive 
indeed.  The  image  of  happy  employ¬ 
ees,  protected  at  work  from  the  evils  of 
the  world  by  a  paternalistic  manage¬ 
ment  that  treats  them  like  children  is  a 
very  sad  one  to  me. 

Disclaimer:  Harvard’s  mission  is  to 
get  people  to  think,  so  treating  them 
like  children  would  be  counterproduc¬ 
tive.  But  the  above  lament  is  mine. 

Bradner  is  a  consultant  with 
Harvard  University’s  University 
Information  Systems.  He  can  be 
reached  at  sob@harvard.edu. 


If  you  are  interested  in  exhibiting  sponsorship  opportunities,  please  contact  Andrea  D’Amato  at  (508)  820-7520  or  adamato@nww.com. 
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Get  the  right  tool  for  the  job. 


Presenting  Backup  Exec  for  Windows  NT  and  Windows  2000,  built  specifically  for  your  network.  It’s  so 
idea!  for  the  job,  it’s  the  number-one  NT  backup  solution  in  the  world.  It’s  the  only  backup  software  with 
a  flexible  Exchange  option,  and  the  versatility  to  restore  complete  servers,  individual  mailboxes  and  folders. 
So  call  1  -800-729-7894  ext.  81518  or  surf  www.veritas.com  for  more  information.  And  make  short  work  of  a  big  job. 


Backup  Exec  for 

WINDOWS  NT 


BUSINESS  WITHOUT  INTERRUPTION.” 


VERITAS 
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Our  partnership  with  Covad  allows 
us  to  offer  the  highest  performing 
and  most  reliable  DSL  Solution 
COVAD  across  the  United  States. 


TAKES  THE  LABOR  OUT 
OF  DSL  MANAGEMENT 


NETWORK  ASSESSMENT 


CARRIER  COORDINATION 


INSTALLATION  MANAGEMENT 


USER  CARE  AND  SUPPORT 


We’re  how  Fortune  1000  companies  simplify  their  DSL  deployment 

Picture  yourself  planning,  coordinating,  installing,  and  supporting  a 
nationwide  DSL  solution  with  say,  2,000  remote  workers.  Looks  a  bit 
complex,  doesn’t  it?  Good.  Because  now  you're  ready  to  imagine  making 
just  one  call  to  DSLnetworks,  and  experiencing  The  Power  of  One™. 

DSLnetworks  is  a  true  single-source  solution.  We  have  the  largest 
nationwide  DSL  coverage  via  our  innovative,  dedicated  DSL  network. 
After  all,  DSL  is  all  we  do.  Well  plan  your  ultimate,  high-speed  DSL 
network,  select  and  supervise  the  best  carriers,  manage  installations, 
and  provide  you  with  world-class  service  and  support. 

Find  out  why  companies  such  as  Microsoft,  Lucent  Technologies, 
and  The  Gap  have  chosen  DSLnetworks.  We’d  like  to  show  you  how 
we  can  help  your  enterprise  reach  its  high-speed  connectivity  potential. 
Visit  our  website  at  www.dslnetworks.com  or  call  1 -888-4DSLnet. 
DSLnetworks.  It’s  as  simple  as  that. 


©  1 999  DSLnetworks.  All  trademarks  are  the  property  of  their  respective  owners. 


Ask 


Dr  Intranet 


B  y  Steve 
Blass 

We  have  been 
setting  up  our 
Windows  NT 
servers  with  IPX 
and  using  IPX-type- 
20  propagation  in 
our  routers  so  the 
NT  machines  can  see  each 
other  across  routers.  But  we're 
moving  away  from  IPX,  and  I 
wonder  if  we  can  do  some¬ 
thing  similar  with  TCP/IP. 

Via  the  Internet 

You  can  use  TCP/IP  to  let 
your  NT  machines  see  each 
other  across  a  router.  Specifica¬ 
tions  for  running  NetBIOS  over 
TCP/IP  are  documented  in  IETF 
RFC  1001  and  RFC  1002. 

In  the  Windows  TCP/IP  set¬ 
tings  dialog,  underthe  NetBIOS 
tab,  check  the  "I  want  to  enable 
NetBIOS  over  TCP/IP"  box.  Once 
you  have  WINS  name  services 
(or  LMHOSTS  files)  in  place  to 
map  NetBIOS  names  to  IP  ad¬ 
dresses,  everything  should  work 
except  network  browsing.  For 
browsing,  you  need  a  Master 
Browser  on  each  net  segment. 
The  Browse  Master  parameter 
in  the  Advanced  Properties  for 
File  &  Printer  Sharing  for  Micro¬ 
soft  Networks  dialog  box  con¬ 
trols  whether  a  machine  can 
serve  as  a  Master  Browser. 
Setting  it  to  "Automatic"  lets  a 
system  become  the  Master 
Browser  for  a  segment. 

You'll  also  need  to  issue  the 
commands  "no  IP  forward  UDP 
port  137"  and  "no  IP  forward 
UDP  port  138,"  because  the  Cis¬ 
co  Dynamic  Host  Configuration 
Protocol  relay  agent  forwards 
NetBIOS  name  and  datagram 
server  packets  by  default  (which 
you  don't  want).  The  commands 
will  prevent  the  forwarding  of 
server  announcements  to  the 
wrong  Master  Browsers. 

Blass  is  a  network  archi¬ 
tect  at  Sprint  Paranet  in 
Houston.  You  can  reach  him 
at  drintranet@paranet.com. 


An  Inside  Look  at  the  Technologies 
and  Standards  Shaping  Your  IMetwork 


NewT-1  bundles  bridge  gap  to  1-3 


BY  DAN  PALMER 

As  Internet  use  increases, 
enterprises  are  outgrowing 
the  1.5M  bit/sec  capacity  of 
copper  T-l  lines,  which  means  facing  the 
huge  price,  bandwidth  and  availability 
gap  between  T-l  and  fiber-based  T-3  with 
its  45M  bit/sec  capacity. 

In  many  locations,  T-l  monthly  access 
charges  are  below  $500,  significantly  less 
than  the  $4,000  or  more  charged  for  aT-3 
line.Additionally,T-3  is  unavailable  to  most 
businesses  in  the  U.S.,  and  provisioning 
can  take  months  where  it  is  available. 


tive,  high-performance,  bandwidth-effi¬ 
cient  means  needed  for  large-scale  deploy¬ 
ment  of  a  new  multimegabit  service. 

This  situation  has  driven  the  search  for 
a  new  class  of  products  able  to  break 
through  the  performance  bottleneck  of 
previous  packet-based  multilink  solutions. 
To  accomplish  this  breakthrough,  the 
prospective  products  must  bundle  multi¬ 
ple  T-l  circuits  at  wire  speeds,  using  stan- 
dards-based  Multi-Link  PPP  (MLPPP)  and 
Multi-Link  Frame  Relay  (MFR)  protocols. 

For  strong  performance  and  low 
latency,  these  products  need  to  segment 
packets  into  fragments  and  transport 


error,  test  or  failure  conditions. 
Removing  the  problem  circuit  from  the 
bundle,  decreasing  the  bundle  band¬ 
width  accordingly,  and  then  reinstating 
the  circuit  once  the  anomaly  has  cleared 
will  solve  the  reliability  issue.  Standards- 
based  MLPPP  and  MFR  protocols  pro¬ 
vide  methods  to  ensure  bundle  recovery 
when  individual  circuits  have  problems, 
increasing  overall  network  reliability. 

To  create  a  virtual  multimegabit  access 
path  between  an  end  user  and  a  service 
provider  point  of  presence  requires  multi¬ 
link  customer  access  and  POP  aggregation 
equipment.  The  equipment  must  fit  seam- 


HOW  IT  WORKS 

Forming  a  virtual  multimegabit  path 


Bundling  multiple  T-1 
lines  provides  readily 
available  copper- 
based  Internet  access 
at  speeds  from  1.5M 
bit/sec  to  24M  bit/sec. 
The  technique  can 
prove  useful  for 
organizations  whose 
needs  have  surpassed 
the  capabilities  of  a 
single  T-1  but  are 
insufficient  to  justify 
the  leap  to  T-3. 


LAN 


Multimegabit 

PPP  and 

access  device 

frame  relay 

O  The  multimegabit  access  device 
provides  wire-speed  forwarding  of 
traffic  from  the  LAN  or  router  over  a 
virtual  access  path  created  by  bundling 
up  to  1 6  copper  T-1  lines  using  standard 
multilink  PPP  and  frame  relay  protocols. 


T-1  lines 


1  u  n  i  n  1 1  n  is 

Multimegabit 
access  device 


Hi 


Local  exchange 
network 


^iiiiniiiimi 

Multimegabit 
access  device 


•: 


Q  The  T-1  s  are  transported  from  the  user 
facility  through  a  local  exchange  network 
to  the  service  provider’s  POP.  The  T-1  s 
arrive  as  individual  copper  lines,  or  they 
may  be  multiplexed  together  with  other 
user  T-1  s  onto  a  channelized  T-3. 


Multimegabit 
aggregation  device 
,  at  ISP  POP 

Internet 


Q  The  multimegabit  aggregation  device  at  the  POP  provides 
wire-speed  concentration  of  numerous  multi-T-1  and  T-1 
customers  into  a  single  IP  or  frame  relay  stream  that  is 
forwarded  to  Internet  access  routing  or  switching  equipment. 


Moreover,  not  all  users  require  T-3 ’s  ultra- 
high  speeds.  As  a  result,  businesses  and 
ISPs  need  a  new  multimegabit  offering 
that  effectively  bridges  the  T-l  to  T-3  gap. 

A  practical  solution  to  this  problem  is 
to  bundle  readily  available,  inexpensive 
copper  lines,  thus  forming  a  virtual  mul¬ 
timegabit  access  path  that  has  the  high 
throughput  and  low  latency  of  a  single 
high-speed  circuit  and  bandwidth  equiv¬ 
alent  to  the  aggregated  lines.  For  exam¬ 
ple,  four  bundled  lines  would  behave  as 
one  circuit  with  approximately  four 
times  the  throughput  and  one-fourth  the 
latency  of  a  single  line. 

T-l  provides  an  excellent  source  of 
affordable  and  available  copper  lines  be¬ 
cause  of  its  existing  tariffs,  guaranteed 
symmetrical  transport,  secure  connectivi¬ 
ty  and  ease  of  maintenance.  However, 
established  methods  of  bundling  multiple 
T-l  circuits  do  not  provide  the  cost-effec¬ 


each  fragment  over  a  separate  member 
of  the  T-l  bundle.  At  the  other  end  of  the 
link,  the  fragments  will  be  reassembled 
after  compensating  for  up  to  128  msec 
of  differential  delay  between  the  T-ls. 
The  packet  fragments  must  maximize 
the  bandwidth  available  for  customer  IP 
traffic  while  avoiding  the  bandwidth 
inefficiencies  associated  with  technolo¬ 
gies  such  as  Inverse  Multiplexing  over 
ATM.  All  T-ls  in  the  bundle  also  must  be 
highly  efficient  to  provide  truly  plug- 
and-play  performance,  but  the  arrange¬ 
ment  must  not  require  load  balancing  or 
packet  tuning. 

The  increased  robustness  available 
from  a  packet-based,  multiple-link  tech¬ 
nology  is  critical  for  this  new  brand  of 
bundled  lines  because  the  multilink  vir¬ 
tual  multimegabit  access  path  must  con¬ 
tinue  to  operate  reliably  even  if  one  of 
the  links  in  the  bundle  is  experiencing 


lessly  into  the  current  network  infra¬ 
structure  to  maximize  its  use  while  reduc¬ 
ing  overall  deployment  costs. 

This  next  generation  of  multimegabit 
access  products  will  enable  ISPs  to  offer  a 
new  service,  generate  new  revenue  and 
differentiate  themselves  from  competitors. 
ISPs  will  be  able  to  layer  services  such  as 
virtual  private  networks  and  quality-of-ser- 
vice  agreements  on  top  of  this  new  ser¬ 
vice.  The  virtual  multimegabit  access  path 
will  let  service  providers  offer  business 
subscribers  that  have  reached  the  limit  of 
T-l  access  a  practical  and  affordable  way  to 
migrate  to  higher  speeds  without  making 
the  huge  leap  to  T-3. 

Palmer  is  president  and  CEO  of  Tiara 
Networks  in  San  Jose,  which  designs  a-  U 
manufactures  access  and  aggregation 
concentrators  for  ISPs.  He  can  be  reached 
at  info@tiaranetu forks. com. 
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Technology  Update 


Gearhead  —  inside  the  network  machine  .  Mark  Gibbs 

Working  with  the  NT  Wegistry 


“Be  vewy,  vewy  qwiet,  I’m 
wegistry  bunting.”  —  What  Elmer 
Fudd  might  have  said  had  he  had  to 
deal  with  Windows. 

Are  you  sitting  comfortably?  Then 
Gearhead  will  begin:  Once  upon  a 
time  there  was  Windows  95,  and  Bill 
looked  upon  it  and  said: “This  is  good 
but  not  nearly  complicated  enough  — 
let’s  juice  it  up,  boys.  Howsabout  a 
registry?”  And  thus  it  was  so  engi¬ 
neered,  and  Bill  smiled  on  the  OS  and 
saw  it  was  good  ...  for  masochists. 

OK,  so  last  week  Gearhead  threat¬ 
ened  you  with  the  horror  of  the  NT 
registry  and  being  a  geek  of  his  word, 
here  it  is:  The  horror  is  that  the  NT 
registry  is  even  more  bizarre  than  the 
Windows  95/98  scheme.  Honest. 

Not  content  to  have  the  registry 
splurged  across  just  a  couple  of  files, 
as  with  Windows  95  and  98,  NT  also 
uses  something  called  hives.  And  just 
like  hives  that  appear  when  some  peo¬ 
ple  are  stressed  or  allergic,  NT  hives 
are  a  rash  of  lumps  (OK,  they’re  really 
files)  in  the  subdirectory  \%system 
root%\system32\  config. 

Note:  Systemroot  is  an  environ¬ 
ment  variable.  Start  a  copy  of  COM¬ 
MAND  (use  the  RUN  command  on 


the  start  menu)  and  at  the  resulting 
DOS  prompt  type  “SET”  and  examine 
the  output.  Normally  systemroot  is 
set  to  “c:\winnt”  but  yours  may  vary. 

The  actual  hive  files  contain  reg¬ 
istry  keys,  and  the  list  of  current  hive 
files  can  be  found  by  firing  up 
REGEDIT  and  opening  the  keys 
HKEY_LOCAL_MACHINE\System\Cu 
rrentControlSet\Control\hivelist. 
Under  this  hierarchy  of  keys  you’ll 
find  the  hive  files  listed.  In  the  subdi¬ 
rectory  where  the  hive  files  are  you’ll 
find  .LOG  files  for  almost  all  hive 
files.  These  record  changes  made  to 
each  hive.  There  are  also  .SAV  files 
that  are  backup  copies  of  their  corre¬ 
sponding  hive. 

And  as  if  that’s  not  enough,  there’s 
also  a  unique  alter  ego  for  the  SYS¬ 


TEM  hive:  SYSTEM. ALT.  If  the  PC 
crashes  and  damages  the  system  hive 
(critical  to  initializing  the  operating 
system),  the  NT  boot  loader  can 
automagically  replace  the  faulty  hive 
with  the  SYSTEM.ALT  backup. 

All  of  these  files  are  held  open  by 
the  NT  kernel  for  exclusive  access  so 
you  can’t  rename,  delete  or  move 
them.  But  you  can  back  them  up. 
Backup  can  be  done  with  Microsoft’s 
NTBACKUP.EXE  or,  if  you  lash  out 
and  buy  the  NT  Server  Resource  Kit, 
REGBACK.EXE.  The  big  advantage  of 
REGBACK  is  that  it  will  back  up  the 
registry  onto  media  other  than  tape, 
the  only  media  supported  by 
NTBACKUP. 

If  you  want  to  edit  the  NT  registry, 
you  have  two  choices:  REGEDIT, 
which  behaves  more  or  less  identi¬ 
cally  to  the  Windows  98  version,  and 
REGEDT32,  which  opens  any  branch 
under  a  registry  key  in  its  own  pane. 
REGEDT32  is  definitely  worth  getting 
familiar  with,  as  it  provides  a  lot  more 
functionality. 

At  this  point  Gearhead  hesitates  to 
go  much  further  into  the  guts  of  the 
NT  registry  system,  because  the  sheer 
weight  of  detail  could  fill  the  column 


over  and  over  again. 

To  better  understand  the  registry, 
Gearhead  strongly  recommends, 
Managing  the  Windows  NT  Registry, 
by  Paul  Robichaux  —  a  comprehen¬ 
sive,  if  somewhat  brain-numbing,  book. 

So  what  neat  key  settings  are 
there?  Howsabout  being  able  to  boot 
NT  and  automatically  log  on  as  a  spe¬ 
cific  user?  Find  HKEY_LOCAL_ 
MACHINE\SOFTWARE\Microsoft\ 
WindowsNT\CurrentVersion\WinLog 
on  and  add  the  value 
AutoAdminLogon  with  the  data  type 
REG_SZ  and  set  the  data  to  “l”.Then 
edit  DefaultDomain,  Default 
UserName  and  DefaultPassword  as 
required. 

If  you’re  really  tuning  up  your 
security,  you  might  want  to  hide  the 
name  of  the  last  user  to  log  on.  Find 
the  same  key  we  used  for  the  auto 
logon  and  add  a  value  named 
DontDisplayLastUserName  with  a 
data  type  of  REG_SZ  and  set  it  to  “1”. 

Cool,  huh? 

And  remember,  if  you  make  reg¬ 
istry  changes,  back  up  first  and  be 
vewy,  vewy  careful. 

Settings  to  gh@gibbs.com 


wasn't  enough 
to  argue  about  these  days,  get 
ready  to  throw  directory'  man¬ 
agement  on  the  pile.  In  this 
month’s  Fusion  Face-off,  En- 
tevo  and  ISOCOR  go  to  the 
mat  over  which  approach  to 
directory'  management  is  best. 
Entevo  chief  Amir  Hudda  says 
virtual  directories  hold  the 
most  promise.  But  Ian 
Goldsmith,  ISOCOR’s  director 
of  product  strategy,  say's  meta¬ 
directories  are  the  right  com- 


ght 

u>s,  tips  and 
ds  from  our 
Web  site 

bination  of  middleware  and 
enterprise  application  to  bol¬ 
ster  your  network.  Both  exec¬ 
utives  are  online  this  week  to 
defend  their  positions  and 
answer  your  questions. 
DocFinder:  5222 

Help  Desk 

This  week’s  question  in¬ 
volves  Class  C  addresses.  A 
reader  has  run  into  problems 
setting  up  his  second  Class  C 
network.  “Does  each  Class  C 
have  to  have  its  own  router? 
And  should  I  subnet  before 


implementing  the  second  net¬ 
work?”  he  asks.  Ron  Nutter 
recommends  staying  with  the 
same  subnet  mask  for  all  of 
the  reader’s  Class  C  address 
ranges.  But  head  online  to  read 
some  of  the  IP  troubleshoot¬ 
ing  techniques  he  uses  to 
solve  the  reader’s  problem. 

DocFinder:  5229 

Internet  wiretapping 

Should  the  Internet  Engi¬ 
neering  Task  Force  (IETF)  help 
the  government  tap  into  your 
Internet  traffic?  The  standards 
group  has  been  called  upon 
by  government  officials  to 
develop  protocols  that  would 
make  it  easier  to  track  mes¬ 
sages  across  the  ’Net.  But  even 
the  IETF  has  its  doubts  about 
whether  wiretapping  should 
be  supported  in  protocols  for 
switches  that  will  combine 
voice  and  data  traffic  for  trans¬ 
mission  over  the  Net.What  do 
you  think?  Let  us  know  in  our 
forum. 

DocFinder:  5230 


Unraveling  SMON 

Switched  networks  pose  a 
special  challenge  to  network 
managers  because  the  very 
capability  that  makes  them 
efficient  —  full  network 
bandwidth  allocation  to  sin¬ 
gle  end  points  —  also  makes 
them  difficult  to  monitor  and 
control.To  get  the  big  picture 
of  network  activity  and  drill 
down  to  specific  switches, 
segments,  flows  and  applica¬ 
tion  traffic,  managers  need  a 
new  approach  to  net  moni- 
toring.This  is  what  the  newly 
ratified  Switch  Monitoring 
(SMON)  standard  is  all  about. 
Head  online  for  a  detailed 
look  at  SMON,  including  a 
diagram  of  how  it  works  and 
the  IETF’s  standard. 

DocFinder:  523 1 

Microsoft  as  an  ASP? 

Microsoft  President  Steve 
Ballmer  outlined  plans  earlier 
this  month  for  the  software 
giant  to  become  an  applica¬ 
tion  service  provider.  Readers 


are  mixed  on  whether 
Microsoft  should  enter  this 
growing  market.  “The  prob¬ 
lem  with  it  is  that  an  applica¬ 
tion  serving  environment  will 
require  even  more  bandwidth 
on  the  existing  physical  inter¬ 
networking  infrastructure, 
which  is  already  a  serious 
concern  now.  If  Microsoft 
starts  banking  on  application 
serving,  it  will  be  more  depen¬ 
dent  than  ever  on  third-party 
traditional  PSTN  owners  such 
as  AT&T,”  one  reader  says. 
What  do  you  think? 

DocFinder:  5232 


Ron  Nutter  is  standing  by 
to  answer  your  network¬ 
ing  questions.  Read  his 
column  every  week  on 
Fusion. 
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pinions 


Editorial 

My  Top  10 


I  was  relaxing  with  some  colleagues  at  a 
local  watering  hole  last  week  when  we 
started  arguing  over  the  most  pressing 
technology  issues  of  the  day. 

After  going  this  way  and  that,  we  finally 
came  up  with  the  following  list.  We  intention¬ 
ally  avoided  budgetary  and  staffing  concerns, 
figuring  those  were  givens. 

•  Y2K.  Not  much  argument  here.  Regard¬ 
less  of  how  well  you’ve  pre¬ 
pared,  you  can’t  rest  until 
you’ve  outdistanced  this 
beast. The  great  unknown  is 
the  ripple  effect.  How  many 
small,  unanticipated  events 
does  it  take  to  create  a  cas¬ 
cading  catastrophe? 

•  Internet.  Another  layup. 
Everything  from  intranets  to 
extranets  to  electronic  com¬ 
merce.  While  saving  money 
with  things  like  virtual  private 
networks  is  important,  the  real  power  is  using 
the  ’Net  to  change  the  way  you  interact  with 
business  partners  and  customers. 

•  Higher-speed  everything.  It’s  hip  to  say 
bandwidth  is  a  commodity,  but  it  isn’t  easy  to 
predict  how  much  you’ll  need,  where  and 
when.  And  it  will  get  harder  as  we  adopt 
things  such  as  streaming  and  convergence. 

•  Managed  bandwidth.  Adding  fatter  pipes 
won't  always  be  the  answer. That’s  where 
quality  of  service  comes  in.  Start  looking  for 
specific  routes  where  you  can  adopt  it. 

•  IP  everything.  The  trick  is  finding  appli¬ 
cations  that  can  benefit  from  voice  over  IP 
so  you  can  implement  it  now  and  learn  as 
you  go. 

•  Application  hosting.  There  isn’t  a  single 
software  vendor  out  there  that  isn’t  scram¬ 
bling  to  see  how  it  can  morph  its  business 
into  a  network-based  service  business.  You 'll 
have  to  be  sure  your  organization  understands 
the  consequences  of  moving  to  this  model. 

•  Directories.  Microsoft  ’s  Active  Directory 
will  begin  to  convince  companies  to  move  to 
directory-enabled  networks.  It  won’t  happen 
overnight,  but  it’s  time  to  craft  a  plan  for  a 
companywide  integrated  directory. 

•  Streaming  media.  Companies  are  saving 
millions  of  dollars  per  year  using  streaming 
tools  to  do  everything  from  replacing  video¬ 
tape  distribution  systems  to  supporting  train¬ 
ing.  But  is  the  network  ready? 

e  Teleworkers.  The  crush  is  still  on  to 
accommodate  an  ever-increasing  number  of 
employees  who  want  to  work  from  home. 
Crafting  a  solid  support  plan  is  critical. 

•  And  finally,  conserving  WAN  costs.  Deter¬ 
mining  how  to  get  more  for  less  remains  criti¬ 
cal  because  the  WAN  budget  is  still  so  huge. 

Does  this  list  match  your  own?  If  not,  let 
me  know  what  you  would  swap. 

—  John  Dix 
jdix@mvw.com 


NOT  A  BOOTH  BABE 

Regarding  Susan  Bieberfeld’s  letter  to  the 
editor  “Add  sexism  to  ageism”  (Oct.  1 1,  page 
54): 

Sexism  is  pervasive.  I  have  an  engineering 
degree  in  aerospace.  I  have  had  the  same  expe¬ 
rience  Bieberfeld  describes  —  of  people  ignor¬ 
ing  what  I  say  but  taking  the  same  advice  or 
instruction  from  a  male  colleague. 

Not  only  have  I  pulled  cable,  I  have  climbed 
through  cable  ducts  and  piloted  cherry  pickers.  I 
was  an  active  member  of  the  group  that  wrote  the 
MPEG-2  standard. These  days,  when  I  find  myself  on 
trade  show  booths,  visitors  assume  I  am  a  “booth 
babe.”  The  only  benefit  I  can  find  from  all  of  this  is 
that  when  someone  comes  to  the  booth  at  the  end 
of  the  day  and  asks  to  speak  to  an  engineer,  I  can 
hand  him  off  to  a  male  colleague  who  knows  less 
about  the  technology  than  I  do  and  save  my  voice.  I 
had  pondered  getting  gray  highlights  to  look  older, 
but  I  gather  that  doesn’t  work,  either. 

I  can  only  wonder,  if  sexism  is  this  bad  in  high 
tech  with  such  a  skills  shortage,  how  much  worse 
must  it  be  in  more  mundane  areas  of  industry? 

Louise  Wasilewski 
Alpharetta,  Ga. 

What  processors  need 

I  agree  with  Tom  Medrek’s  outline  of  the  need 
for  network  processors  (“Network  processors 
speed  progress,”  Oct.  1 1,  page  51).  Combining 
speed  and  programmability  will  give  OEMs  an 
important  building  block.  Programmability,  in  par¬ 
ticular,  will  speed  product  development  cycles, 
making  it  easier  to  upgrade  via  software  and  elimi¬ 
nating  the  need  for  forklift  upgrades. 

Additionally,  I  agree  that  Reduced  Instruction  Set 
Computing  processors,  because  of  their  generalized 
architectures,  will  not  meet  the  needs  of  next-genera¬ 
tion  networks.  Future  architectures  must  be  designed 
from  the  ground  up  to  be  network  processors.  With 
the  explosive  growth  of  the  Internet,  it  will  be  critical 
for  these  new  architectures  to  scale  to  meet  the  ever- 
increasing  need  for  both  bandwidth  and  complex 
Layer  2  through  7  data  processing. 


New  programming  languages  are  also  re¬ 
quired.  Just  as  SQL  was  developed  to  provide  a 
super-efficient  database  language,  powerful, 
high-level  languages  designed  for  communica¬ 
tion  applications  must  be  developed.  Because 
software  development  will  replace  the  hard¬ 
ware  development  model  in  the  Application 
Specific  Integrated  Circuit  world,  it  will  be 
imperative  that  these  new  languages  provide  an 
order  of  magnitude  improvement  in  efficiency 
and  ease  of  development. 

Bob  Bridge 
Vice  president  of  marketing 
Agere 
Austin,  Texas 

An  old  idea 

In  her  column  “ASPs  make  a  strong  case  for  renting 
vs.  buying  apps”  (Sept.  27,  page  37),  Linda  Musthaler 
states  that  “the  ASP  model  is  in  its  infancy.”  In  reality, 
an  application  service  provider  is  nothing  more  than 
a  glorified  service  bureau,  and  service  bureaus  have 
been  in  existence  since  the  late  ’50s.  The  only  differ¬ 
ence  is  in  the  way  companies  would  gain  access  to 
the  hosting  mainframe  and/or  network. 

The  reasons  Musthaler  gives  for  using  an  ASP  are 
valid.  My  only  point  of  contention  is  that  the  article 
presents  this  service  as  something  new. 

Raymond  Zinicola 
Administrator 
OMNI  Orthopaedics 
Canton,  Ohio 

Listen  up,  execs 

Mark  Gibbs’ “Backspin”  column  “Dear  Exec:  Listen 
to  the  expert”  (Oct.  4,  page  98)  was  great.  I’ve  seen 
both  sides  of  that  story  and  can  really  relate  to  it. 
There  is  another  side  to  the  Clueless  Exec,  though. 

I  belong  to  a  NetWare  User  International  group 
and  have  had  the  opportunity  to  associate  with  many 
different  business  groups  in  town.  I’ve  seen  many 
executives  put  someone  such  as  the  human  resources 
manager  in  charge  of  their  LAN  in  an  effort  to  save 
money. These  execs  just  don’t  realize  how  much  they 
are  hurting  their  business  by  not  having  someone 
with  some  basic  network  knowledge  around. 

David  Maurice 
San  Antonio,  Texas 


Send  letters  to  nwnews@nww.com  or  John 
Dix,  editor  in  chief,  Network  World,  161 
Worcester  Road,  Framingham,  MA  01701. 
Please  include  phone  number  and  address 
for  verification. 
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Don’t  wait  until  PKI  has  grown  up  to  put  it  to  use 


Today,  public-key  infrastructure  (PKI)  —  the 
technology  for  managing  public  and  private 
keys  and  digital  identity  certificates  —  is  still  in 
its  adolescence.The  technology  has  tremen¬ 
dous  potential  for  securing  electronic  business, 
budding  market  demand  and  promising  prod¬ 
ucts,  but  also  suffers  from  continuing  manageability, 
interoperability  and  deployment  problems. 

Adolescent  or  not,  PKI  will  significantly  affect 
enterprise  IS  infrastructures.  Public-key  encryption 
and  digital  signature  support  is  now  built  into  e-mail, 
virtual  private  networks  (VPN)  and  other  software 
packages.  While  some  packages  require  a  special- 
purpose  PKI,  such  as  Microsoft  Certificate  Services  or 
Lotus  Notes/Domino,  many  applications  can  work 
with  general-purpose  PKIs  designed  for  multivendor 
and  multiplatform  environments. 

The  question  is,  do  you  wait  until  PKI  is  fully 
grown,  stop  all  enterprise  deployment  and  risk  los¬ 
ing  ground  to  competitors  in  the  brave  new  elec¬ 
tronic  business  world?  Or  do  you  move  ahead 
aggressively  and  take  the  smaller  risk  of  getting 


burned  by  cost  or  schedule  issues? 

If  you  go  ahead  with  PKI,  don’t  let  too 
many  special-purpose  PKIs  proliferate. 

Some  of  them  are  hard  to  scale  or  don’t 
incorporate  the  latest  industry  standards. 

And  each  requires  its  own  policy  docu¬ 
ments,  recovery  mechanisms,  trust  rela¬ 
tionships,  risk  analyses  and  administration 
processes.  Defining  these  in  a  duplicative,  inconsis¬ 
tent  way  can  be  expensive  or  downright  hazardous  to 
your  electronic  business  health. 

Once  you  decide  on  a  general-purpose  PKI,  you 
must  determine  whether  to  manage  critical  PKI  com¬ 
ponents  such  as  certificate  authorities  internally  or  out¬ 
source  the  task  to  a  public  certificate  authority  service. 

Insourced  PKI  from  vendors  such  as  Entrust  Tech¬ 
nologies,  Baltimore  Technologies  and  Xcert  give  you 
greater  control  of  your  own  destiny.  You  can  set  your 
own  certificate  and  key  management  policies  and 
engineer  your  infrastructure  to  comply  with  these 
policies.  In  addition,  insourced  PKI  products  are  more 
feature-rich,  and  thus  more  flexible,  than  outsourced 


PKI  services. 

Outsourced  PKI  services  from  vendors 
such  as  VeriSign,  Thawte  and  GTE  also 
have  advantages.  Costs  and  schedules  are 
more  predictable  because  you  can  lever¬ 
age  existing  expertise.  You  re  subject  to 
the  outsourced  PKI  service  provider’s 
policies,  but  can  gain  improved  interoper¬ 
ability  by  joining  the  provider’s  trust  network. 

Cost  is  obviously  a  concern,  as  well.  Insourced  PKIs 
cost  less  per  user  than  outsourced  PKIs,  but  overall 
support  costs  are  higher.  You  will  have  to  issue  a  sig¬ 
nificant  number  of  certificates  before  your  insourced 
PKI  investment  begins  to  pay  off. 

A  wise  approach  may  be  to  get  your  feet  wet  with 
a  PKI  pilot  involving  a  few  users  and  an  outsourced 
PKI  solution.  You  can  then  switch  to  an  insourced 
solution  as  usage  rises. 

Blum  is  senior  vice  president  and  principal  con¬ 
sultant  with  The  Burton  Group,  an  IT  advisory >  ser¬ 
vice.  He  can  be  reached  at  dblum@tbg.com. 


Yankee  Ingenuity  .  Howard  Anderson 

Internet  ‘keiretsus’:  ’Net  firms  find  strength  in  numbers 


Mave  you  been  following  the  battles  between 
eBay  and  Auction  Watch  or  X.com  and 
Wingspan?  If  you’re  wondering  which  com¬ 
panies  will  triumph,  first  take  a  look  at 
which  Internet  “keiretsus”  they  belong  to. 

In  the  Japanese  tradition,  keiretsus  are  verti¬ 
cally  linked  cartels.  Keiretsu  members  do  business 
primarily  with  one  another,  with  each  controlling 
some  major  facet  of  commerce.  For  example,  the 

Sumitomo  Keiretsu  is  strong 
in  shipping,  heavy  manufac¬ 
turing,  banking,  insurance 
and  technology.  NEC,  which 
is  a  member  of  the  keiretsu, 
does  a  lot  of  business  with 
Sumitomo  Heavy  Industries, 
finances  through  Sumitomo 
Bank  and  ships  its  goods  on 
Sumitomo  freighters.  Each  of  the  companies  is  inde¬ 
pendent,  but  there  is  substantial  cross-ownership 
and  board  redundancy. 

Keiretsu  members  do  business  with  companies 
outside  the  keiretsu  but  give  “most-favored-nation” 
status  to  fellow  members.  For  example,  if  Softbank 
Ventures  goes  pitching  a  new  start-up  today,  it  does¬ 
n’t  take  long  for  Softbank  to  bring  up  its  relation¬ 
ship  with  Yahoo,  in  which  it  has  a  substantial  invest¬ 
ment.  Or  Kleiner  Perkins  Caufield  &  Byers  will  trot 
out  its  portfolio  company  Excite@Home  and  suggest 
to  a  new  investment  that  a  “strategic  relationship” 
between  the  new  company  and  Excite@Home  could 
easily  be  arranged.  Or  Disney  can  talk  to  fledgling 
companies,  holding  up  Infoseek  and  its  Go  network 
as  bait. 

And  like  the  fully  integrated  Japanese  keiretsus, 


each  Internet  keiretsu  will  have  a  full  array  of  Internet 
assets:  search  engine,  portal,  online  e-commerce  shops, 
e-bank,  insurance  company,  auction  site  and  so  forth. 
Whatever  part  each  keiretsu  doesn’t  yet  have,  it  will 
build  or  buy  into.Then  the  keiretsu  will  post  links  to 
its  newly  acquired  companies  from  its  own  site  and 
make  these  new  companies  work  better. 

The  keiretsus  will  line  up  against  each  other  like 
football  teams.  Furthermore,  they  sometimes  will 
combine  with  one  another  if  any  one  keiretsu  seems 
to  have  an  unassailable  position. 

That’s  the  one  issue  the  keiretsus  worry  about  — 
that  any  one  of  them  will  gain  power  over  the  Inter¬ 
net  the  way  Microsoft  has  power  over  PC  operating 
systems  and  applications  or  Intel  has  power  over 
chips.  In  any  case,  there  will  be  nine  or  so  key  Inter¬ 
net  keiretsus  (Kleiner  Perkins,  Paul  Allen,  CMGI,  AT&T, 
Idealab,  Softbank,  Microsoft,  Disney  and  AOL)  and  a 
gaggle  of  wannabes. 

Entrepreneur  Bill  Gross  has  used  the  Internet 
keiretsus  concept  at  Idealab,  a  so-called  “incubator” 
for  Internet  businesses,  and  it’s  working  like  a  charm. 
Full  disclosure:  I’m  starting  a  high-tech  Internet  incu¬ 
bator,  YankeeTech  Incubator,  right  next  door  to  the 
Massachusetts  Institute  of  Technology,  and  I  have 
been  receiving  offers  and  some  not-so-subtle  threats 
from  the  keiretsus.Their  message:  Let  us  invest  in 
your  incubator  fund,  and  your  young  companies  will 
have  access  to  our  muscular  Internet  friends  and  the 
powerful  cyberspace  brands  we  control.  Don’t  let  us 
invest,  and  your  phone  calls  may  not  be  returned  in 
your  lifetime  and  your  e-mail  will  somehow  never  hit 
our  server. 

Guy  Kawasaki,  former  Apple  evangelist  and  CEO 
and  founder  of  Garage.com,  a  firm  that  helps  high- 
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tech  start-ups  find  venture  capital,  tells  young  start¬ 
ups  that  their  “killer  app,”  which  they  think  is  unique, 
probably  is  simultaneously  being  developed  by  five 
other  start-ups.  In  fact,  says  Kawasaki,  if  a  similar  app 
isn’t  under  development  by  that  many  other  com¬ 
panies,  it  probably  isn’t  very  good.  Which  one  of 
these  start-ups  succeeds?  Probably  the  one  that  is 
wired  to  the  right  keiretsu. 

The  Yankee  Group  estimates  that  there  are  now 
10,000  Internet  start-ups  and  business  plans  around 
—  because  every  one  we  meet  can  talk  about  nothing 
else.  They  can’t  all  succeed;  soon  there  will  be  more 
online  pet  supply  stores  than  there  are  cats.  But  the 
one  that  gets  favorable  positioning  at  AOL  or  Yahoo  or 
eBay  clearly  will  have  advantages  over  the  others. 

The  traditional  advice  to  young  companies  is  speed 
at  all  costs.  Not  bad  advice,  but  not  quite  accurate; 
what  is  more  important  is  that  key  strategic  call. 
Strategy  has  to  go  beyond  hiring  quickly,  marketing 
heavily  and  running  big  deficits.  Sooner  or  later, 
young  companies  will  need  the  strategic  alliance  that 
is  the  mother’s  milk  of  the  Internet  keiretsu. 

While  there  is  nothing  wrong  with  or  illegal  about 
Internet  keiretsus,  they  bear  watching  because  this  is 
where  the  corporate  battles  of  the  near  future  will  be 
fought.  I  predict  that  the  Department  of  Justice  wiil 
one  day  attack  the  Internet  keiretsus  because  they 
will  be  in  restraint  of  trade.  Good  luck.  MacArthur 
tried  to  break  up  the  Japanese  keiretsus  and  failed, 
and  I  don’t  expect  the  justice  department  to  be  any 
more  successful. 

Anderson  is  founder  and  president  of  The 
Group,  a  Boston-based  consultancy.  He  a:; 
reached  at  handerson@yankeegroup.ee-  / 
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“Wow,  wire-speed 
ough  the  whole  sta 
Tnere’s  more  at 
www.npix.com” 


Capstone#/  fiber  slave  unit 


«n  Capstone #/ 


Capstone,?-//  twisted 
pair  slave  unit 


The  Keys\or\e24mg  Gigabit 
Ethernet  Switch  uses  a 
dedicated  8  Gbps  high-speed 
interface  that  links  the  slaves 
to  the  64  Gbps  switch  fabric. 


L _ ] 

Stack  up  bigger,  faster  networks  at  lower  prices  per  port. 

NPI’s  new  Keys\one24mg Gigabit  Ethernet  switch  features  24  10/100  ports  and  two  optional  Gigabit  uplink  ports,  expandable  to  96  10/100 
ports.  Every  port  in  the  stack  is  “Powered  by  NuWave Architecture” to  deliver  wire-speed,  non-blocking  performance  at  today’s  lowest 
prices  per  port.  The  entire  stack  is  fully  managed  as  a  single  entity.  Call  1  -800-674-8855  or  visit  our  web  site  at  www.npix.com  to  see  how 
well  NPI  switches  stack  up  for  your  growing  applications. 


NPTs  Gigabit  switches 
leapfrog  the  competition 
again  with  wire-speed, 
non-blocking  performance, 
through  the  entire  stack. 


The,  Gigabit  Ethernet  Company™ 
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What  is  the  best  directory  management  approach? 


Entevo  touts  the  benefits  of  virtual  directories;  ISOCOR  recommends  metadirectories. 


BY  AMIR  HUDDA,  ENTEVO 


BY  IAN  GOLDSMITH,  ISOCOR 


Anecdotal  data  suggests  that  as  many  as 
180  directories  are  used  within  a  typical 
organization,  only  a  dozen  or  so  of  which  are 
really  important.  Effectively  managing  these 
directories  has  become  a  challenge  —  one 
that  virtual  directories  are  uniquely  qualified 
to  meet. 

A  virtual  directory  is  an  application  that 
allows  management  services  to  be  per¬ 
formed  across  multiple  directory  services  by 
using  index  mapping  technology  rather  than 
creating  an  additional  directory.  The  virtual 
directory  doesn’t  store  directory  objects; 
rather,  it  stores  information  used  to  access 
directories  and  determine  relationships 
among  the  directory  objects. 

Virtual  directories  enable  a  wide  range  of  administrative  activities  —  includ¬ 
ing  object  synchronization  —  across  multiple  directory  namespaces.  By  con¬ 
trast,  a  competing  technology,  the  metadirectory,  focuses  solely  on  object  syn¬ 
chronization,  accomplished  through  technical  approaches  ranging  from  broker¬ 
ing  to  creating  a  master  directory  store. 

Industry  interest  in  metadirectories  is  high,  due  in  large  part  to  Microsoft’s 
recent  acquisition  of  metadirectory  vendor  Zoomit.  However,  with  the  possible 
exception  of  unique  application-driven  requirements,  most  organizations  will 
find  that  a  stand-alone  metadirectory  solution  can’t  be  cost-justified. 

Why?  Time  and  cost  are  the  principal  factors.  Experts  suggest  that  complete 
implementation  of  a  metadirectory  can  take  years  and  cost  millions  of  dollars. 
Beyond  their  synchronization  capabilities,  most  metadirectories  do  little  to  ease 
the  day-to-day  administrative  duties  of  network  and  systems  managers.  Indeed, 
by  adding  yet  another  directory  to  an  already  complex  mix,  a  metadirectory 
may  actually  increase  administrative  burden.  In  addition,  programmers  must  use 
the  proprietary  application  programming  interfaces  dictated  by  the  specific 
metadirectories,  a  process  that  can  be  burdensome. 

Virtual  directories,  on  the  other  hand,  offer  several  major  benefits  over 
metadirectories. 

First,  because  a  virtual  directory  doesn’t  add  another  directory  to  the  mix, 
additional  infrastructure  demands  and  administrative  overhead  are  avoided. 

Second,  virtual  directories  are  quicker  and  easier  to  implement.  Basic  adminis¬ 
trative  activities  are  immediately  enabled  and  available  in  virtual  directories,  reduc¬ 
ing  implementation  to  a  fraction  of  the  time  required  by  metadirectories. 

Third,  virtual  directories  have  a  wider  range  of  managerial  capabilities. These 
include  searching,  reporting,  single-console  administration  of  multiple  directo¬ 
ries,  delegation  of  authority,  migration  and  workflow  processing.  This  diversity 
lets  organizations  leverage  the  critical  store  of  infor¬ 
mation  contained  in  enterprise  directories. 

These  key  advantages  make  virtual  directories  far 
more  cost-effective  and  practical  than  metadirectories 
for  most  enterprises. 


Hudda  is  chairman,  co-founder  and  CEO  of  Entevo, 
an  Arlington,  Va.,  provider  of  cross-platform  directory 
management  products.  He  can  be  reached  at  (7 03) 
524-1900  or  ahudda@entevo.com. 


More  Online 


•  Want  to  add  your  2  cents  to  this  debate? 
Air  your  views  in  our  Fusion  Face-off 
forum  running  through  Oct.  29.  Hudda 
and  Goldsmith  will  be  adding  their 
thoughts  to  the  discussion. 


Before  we  can  discuss  the  advantages  and 
disadvantages  of  metadirectories  and  virtual 
directories,  it  is  essential  to  understand  what 
both  are. 

A  true  metadirectory  combines  middleware 
with  an  enterprise  directory.  The  middleware 
integrates  the  enterprise  directory  with  intra¬ 
net  and  extranet  systems  such  as  e-mail,  oper¬ 
ating  systems,  human  resources  and  security 
databases,  as  well  as  workflow  systems. A  sin¬ 
gle  entry  is  created  in  the  enterprise  directory 
that  contains,  or  points  to,  information  in  all 
connected  systems. 

A  virtual  directory,  on  the  other  hand, 
delivers  a  fat  client  that  connects  to  all  of  the 
connected  systems  independently  to  read 
and  manage  their  data. 

Virtual  directories  struggle  in  environments  with  existing  applications  and  direc¬ 
tories  because  they  lack  the  concept  of  “the  join.”The  join  allows  a  metadirectory  to 
identify  information  about  the  same  person  or  thing  in  different  systems,  even  if  the 
systems  use  different  names.  For  example,  HR  applications  use  the  full  legal  name 
Robert  M.  Smith  and  an  e-mail  system  uses  the  friendly  name  bob.smith  to  identify 
the  same  person.  Because  the  virtual  directory  does  not  have  a  central  store  it  can 
use  to  consolidate  objects,  it  cannot  resolve  this  kind  of  naming  discrepancy. 

Proponents  of  virtual  directories  will  often  claim  that  a  metadirectory  requires 
an  additional  directory  service.  In  reality,  a  well-designed  metadirectory  will  use  an 
existing  directory  as  its  central  store. 

Virtual  directories  are  limited;  basically,  they  can  be  used  to  independently  man¬ 
age  different  network  operating  systems  such  as  Windows  NT,  Windows  2000  and 
NetWare.  Metadirectories,  on  the  other  hand,  can  integrate  HR,  security  and  enter¬ 
prise  resource  planning  applications  with  a  comprehensive  set  of  user-oriented 
applications,  including  e-mail  systems,  network  operating  systems  and  workflow 
applications.  Metadirectories  can  also  deliver  a  tightly  integrated  directory  founda¬ 
tion  that  provides  a  public-key  infrastrucmre  or  directory-enabled  network. 

A  metadirectory  will  typically  be  deployed  in  an  organization  to  provide  not  only 
a  single  point  of  access  to  administration  of  directory  information,  but  also  to  pro¬ 
vide  an  automated,  intranet  administration  service.  Many  organizations  are  using 
metadirectories  to  integrate  security  or  HR  administration  with  intranet  applica¬ 
tions.  When  the  HR  or  security  administrator  adds,  updates  or  deactivates  a  user,  the 
metadirectory  will  apply  a  set  of  business  rules  to  create,  update  or  deactivate/ 
remove  the  appropriate  user  accounts  in  all  connected  intranet  applications.  A  vir¬ 
tual  directory  simply  provides  another  management  tool  for  administering  a  small 
set  of  the  connected  applications;  it  does  not  offer  a  rule-  or  policy-based  integra¬ 
tion  mechanism. 

The  bottom  line  is  that  metadirectories  are  a  low- 
impact  approach  to  comprehensive  enterprise  intranet 
integration.  Virtual  directories  are  a  narrow  approach,  f. 
deploying  and  managing  a  small  set  of  new  applici.fi.;  . 


Goldsmith  is  director  of  product  strategy  at  1S< 
Santa  Monica,  Calif,  supplier  of  Internet 
directory  and  metadirectory  products.  He  co>-  <  , 

at  (310)  581-8100  or  ian.goldsmithQisocor.  com 
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Frame  Relay 

ordi  ary  1  o  extraordinary. 


ADTRAN  delivers. 


ADTRAN  Frame  Relay 

Host-to-remote 

connectivity 

End-to-end  visibility 
and  control 

Network  performance 
monitoring 
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|  Powerful  tools  for  Frame  Relay  connectivity, 

5  performance  monitoring  and  disaster  recovery. 

|  Now,  your  Frame  Relay  network  can  be  much  more  than  a 

h— 

|  cost-reducing  alternative  to  leased  lines.  With  ADTRAN  solutions, 

CD 

your  Frame  Relay  network  becomes  a  powerful,  dependable 


Service  Level  Agreement 
verification 

Network  trend  analysis 

Dependable  dial-around- 
the-cloud  protection 


infrastructure  supporting  the  mission-critical  telecom  tasks 


SNMP  compatible 


Ali  ADTRAN  wide  ■ 
£rea  connectivity 
products  are  certified 
V2K  compliant. 


your  users  demand.  ADTRAN  termination  equipment  satisfies 
virtually  any  type  service  connection  at  any  location.  Feature- 
packed  performance  monitoring  and  network  management 
deliver  control  over  packet-based  variables.  And  affordable 

dial  backup  assures  that  your  network  won’t  miss  a  beat. 
This  Frame  Relay  solution  is  secure  and  value-packed. 

And  it’s  from  ADTRAN — the  name  synonymous 
with  wide  area  networking  connectivity. 

For  a  reseller  near  you,  call  800  9ADTRAN  and  ask  to 
speak  to  a  Channel  Sales  Representative.  Or,  visit 
www.adtran.com/framerelay  to  view  application  diagrams, 
disaster  recovery  white  paper,  and  more. 


Multinational  solutions 


Safe-T-Net™ 
Disaster  Recovery 


10  Performance 
Monitoring/Network 
Management 


Host-to-Remote 
Access  Equipment 


Empower  your  Frame  Relay  network 
with  ADTRAN  connectivity  solutions. 


Experts  choose  ADTRAN.” 
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registered  trademark  of  ADTRAN,  Inc. 


Free  Product  info  enter  NWInfoXpress  #103  online  @  www.networkworld.com/infoxpress 
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Fear  of  giving  up  control 
haunts  corporate  networks. 


BY  SUSAN  BREIDENBACH 

utsourcing  the  day-to-day  maintenance  of 
your  WAN  can  save  money  and  free  up 
your  staff  for  important,  strategic  pro¬ 
jects.  Handing  the  planning  and  imple¬ 
mentation  of  a  WAN  upgrade  to  a  third 
party  can  be  a  lifesaver,  especially  if 
you’re  under  a  tight  time  frame  or  having 
trouble  finding  qualified  staff. 

And  besides,  managing  a  WAN  is 
simply  a  thankless  job.  Your  corporate 
management  and  end  users  expect 
instant  access  to  resources  anywhere  in  the  world  and 
show  little  or  no  appreciation  for  what  you  must  do  to 
enable  this. 

Despite  these  selling  points,  however,  most  U.S. 
companies  are  not  buying  managed  WAN  services.  “In 
our  last  survey,  only  about  1 5%  of  the  total  had  them,” 
reports  Melanie  Posey,  an  analyst  with  International 
Data  Corp.  (IDC)  in  Framingham,  Mass.  Market  re¬ 
searchers  now  concede  that  they  overestimated  the 
size  of  the  market  for  managed  network  services  and 
how  fast  it  would  grow.  For  example,  only  between 
15%  and  20%  of  all  frame  relay  ports  —  the  most  pop¬ 


ular  type  of  managed  WAN  —  are  managed  by  third 
parties,  according  to  IDC’s  latest  estimate.  IDC  pro¬ 
jects  that  the  number  will  slowly  creep  up  to  only  25% 
in  five  years. 

Ellen  Carney,  principal  analyst  at  Dataquest,  says  the 
largest  companies  are  the  most  resistant  to  managed 


FIVE 

REASONS  tm°a^dV»: 

OIME  Greenfield  projects.  Don't  even  consider  building  a  brand  new  WAN  yourself. 

TWO  Mergers  and  acquisitions.  Let  a  managed  network  provider  that  has  done  it  before  handle  the  network  consolidat 
and  subsequent  operation. 

THREE  Voice/data  convergence.  If  you  are  converging  dedicated  voice  and  data  networks  into  a  single  infrastructur 
give  serious  consideration  to  outsourcing. 

FOUR  Fast-growing  multinationals.  As  you  move  from  country  to  country,  there  are  too  many  differences  among  the 
service  providers  and  their  contracts,  and  you  want  to  deal  with  just  one. 

FIVE  Unsophisticated  user  base.  The  less  technically  savvy  your  users,  the  more  it  costs  you  to  support  them. 


network  services,  while  midsize  companies  below  the 
Global  1000  are  increasingly  coming  to  the  conclusion 
that  the  benefits  of  outsourcing  their  WANs  outweigh 
the  risks. 

Analysts  say  the  big  bugaboo  for  large  corporations 
is  largely  emotional  —  companies  are  afraid  of  losing 
control  of  their  networks,  Posey  says. 

“The  biggest  companies  could  benefit  the  most 
from  managed  network  services  (MNS),  and  they  are 
the  most  reluctant  to  let  go,”  she  adds.  Fortune  50 
enterprises  in  particular  seem  determined  to  keep 
WAN  management  in-house,  even  though  networking 
isn’t  their  core  competency. 

Of  course,  fear  of  letting  go  isn’t  the  only  factor. 
Some  network  professionals  are  confused  by  ail  the 
permutations  of  managed  services  that  are  current  !y 
being  hawked.  Companies  offering  MNS  range  fro;-.; 
local  and  long-distance  telecom  carriers  to  traditional 
outsource  specialists  such  as  EDS  to  service  provide)  s 
that  don’t  own  any  wires  but  function  mote  as  loo¬ 
kers  that  give  you  a  single  point  of  contact. 

Some  MNS  companies  merely  perform  suop>f. 
light/green-light  router  monitoring.  Others  car*,  r 
vide  custom-design  services  and  comprehensive  n.  .i 
agement  of  your  premises,  including  mow-  .  . 
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"You  definitely  need  managed  network 
services  for  international  locations,  but 
nationally  the  jury  is  still  out,"  says 
Stephen  Roberts,  manager  of  network 
services  at  American  Honda  Motor  Co. 
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changes,  and  could  even  manage  devices  all  the  way  to 
the  desktop. 

Claims  about  dramatic  savings  aren’t  particularly 
effective  at  iarger  shops,  either,  partly  because  most 
organizations  don’t  have  a  clue  how  much  it  is  costing 
them  to  run  their  networks.  WAN  management 
expenses  disappear  into  a  black  hole  of  IT  spending, 
and  there  is  nothing  to  compare  to  the  number  in  the 
sendee  provider’s  proposal. 

“Sendee  providers  are  using  a  total  cost  of  ownership 
pitch,  but  the  numbers  are  oversimplified,”  Posey  says. 
“People  whose  job  functions  got  outsourced  are  shifted 
to  other  things  and  are  still  on  the  payroll,  so  the  com¬ 
pany  just  sees  a  big  new  expense  —  the  outsource  bill 
—  and  not  any  savings.” 

Plus,  not  everyone  who  tries  a  managed  WAN  has 
an  entirely  positive  experience.  American  Honda 
Motor  Co.  in  Torrance,  Calif.,  decided  last  year  to  turn 
the  management  of  its  65-site  frame  relay  network 
over  to  Comdisco. 

“Because  of  the  problems  we’ve  run  into  in  outage  sit¬ 
uations,  we’ve  had  to  take  some  of  the  router  manage¬ 
ment  back  in-house,”  says  Stephen  Roberts,  manager  of 
network  services  for  American  Honda.  “Right  now,  our 
response  time  internally  is  faster.  Also,  our  staff  under¬ 
stands  our  business  objectives  and  network  require¬ 
ments  better  and  are  in  a  better  position  to  assess  imple¬ 
mentation  risks  vs.  value  to  the  business.” 

American  Honda’s  internal  staff  is  responsible  for 
network  design,  router  configuration  and  software 
maintenance  on  network  equipment.  Comdisco  over¬ 
sees  the  physical  wires  —  provisioning  lines,  adjusting 
committed  information  rates  and  port  speeds,  and 
troubleshooting  circuit  problems. 

What  type  of  relationship  other  companies  should 
establish  with  managed  services  providers,  if  at  all, 
depends  on  the  size  and  scope  of  their  networks  and 
the  internal  resources  they  have,  Roberts  says.  “You 
definitely  need  MNS  for  international  locations,  but 
nationally,  the  jury  is  still  out.” 

" Our  staff 
understands 
our  business 
objectives 
and  network 
requirements  better  and 
are  in  a  better  position  to 
assess  implementation 
risks  vs.  value  to  the 
business. " 


Stephen  Roberts,  manager  of  network  services, 
American  Honda  Motor  Co. 

But  many  companies  can’t  wait  for  the  jury  to  finish 
its  deliberations.  They  have  to  move  quickly.  Maritz,  a 
$2  billion  performance  improvement  and  travel  ser¬ 
vices  company  based  in  St.  Louis,  needed  to  upgrade  a 
10-site  point-to-point  network  that  was  being  man¬ 
aged  by  one  person  to  a  frame  relay  network  to  sup¬ 
port  a  critical  business  application  that  was  being 
deployed  worldwide. 

“1  was  one  resignation  away  from  implosion,”  says 
Gerry  Imhoff,  vice  president  of  communications  ser¬ 
vices  for  Maritz.  He  outsourced  deployment  and  ongo¬ 
ing  management  of  the  WAN  to  Comdisco. 

Continued  on  page  62 


A  BAKER’S 
DOZEN  TIPS 


OIME  Start  with  your  existing  service  providers. 

A  logical  place  to  start  the  selection  process 
is  with  your  existing  service  providers  because 
they  want  to  keep  your  business  and,  therefore, 
you  have  some  leverage  with  them. 

TWO  Try  to  match  their  strengths  with  your 
needs.  Some  service  providers  may  simply 
be  promoting  the  offerings  they  happen  to 
have  in  their  portfolios.  Make  sure  you  aren't 
being  force-fed  a  particular  approach.  You 
might  be  better  served  by  a  provider  that  lets 
you  pick  from  a  menu  of  services  and  vary  the 
type  and  level  of  service  in  different  locations 
on  the  WAN. 

THREE  Ask  about  global  coverage.  Worldwide 
coverage  is  another  measure.  The  provider's 
geographic  footprint  should  cover  all  locations 
you  are  likely  to  need  in  the  foreseeable  future 
—  including  secondary  and  tertiary  markets. 

FOUR  Try  to  maximize  common  locations.  Look 
for  overlap  between  your  locations  and  a 
provider's  points  of  presence.  The  greater  the 
overlap,  the  more  the  provider  can  reduce  your 
access  charges.  And  some  providers  deliver 
a  particularly  robust  suite  of  global  offerings 
for  telecommuting,  including  dial-up  IP  remote 
access  that  doesn't  rely  on  local  ISPs. 

FIVE  Look  under  the  hood.  Because  of  all  the  TWELVE 

mergers  and  acquisitions,  some  carrier 
infrastructures  are  a  patchwork  of  regional 
networks  connected  by  gateways.  At  some 
point,  look  under  the  hood  and  see  if  a  service 
provider's  network  is  as  seamless  as  its 
marketing  messages  imply.  Management 
information  shouldn't  be  scattered  across 
different  spreadsheets  and  databases.  And 
make  sure  all  equipment  is  carrier-class,  or 
the  provider  may  have  scalability  problems. 

SIX  Be  sure  equipment  is  compatible.  If  you're 
handing  off  an  existing  network,  you  need  to 
find  a  service  provider  that  supports  your  THIRTEEN 
equipment  so  you  don't  have  to  make  a  lot  of 
changes.  Some  service  providers  have  a  small 
set  of  equipment  they  will  monitor,  and  others 
can  accommodate  almost  anything. 

SEVEN  Check  out  polling  intervals.  Polling  intervals 
are  very  important,  and  they  vary  widely  among 
providers.  Some  can  poll  your  entire  network 
every  90  seconds,  while  others  might  take  1 5 
or  20  minutes. 

EIGHT  The  human  factor.  No  matter  how  good  the 
service  provider's  physical  network  looks,  it  is 
a  company's  human  infrastructure  that  really 
makes  the  difference.  Find  out  how  many 
certified  engineers  are  on  the  staff  and  who 
does  the  installation  and  repair.  Also,  find  out 
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with  whom  you  would  be  dealing  when  you 
have  to  call  about  a  problem.  Would  you  get  a 
specific  person  who  is  intimately  familiar  with 
your  network  or  a  different  person  each  time? 

Get  details  on  processes  and  procedures. 

Make  sure  the  service  provider  has  proven 
methods  and  procedures  in  place  for  network 
implementation,  problem  escalation  processes 
and  change  management.  Ask  to  see  process 
documentation  —  it  should  exist  —  and  have 
the  provider  go  through  the  steps  with  you. 

Check  out  security.  Security  is  critical,  and 
fears  about  it  are  one  of  the  reasons  companies 
give  when  asked  why  they  aren't  outsourcing 
their  WANs.  Do  they  let  prospective  customers, 
analysts  and  reporters  wander  through  their 
operations  center,  or  is  security  so  tight  it 
takes  a  retinal  scan  to  get  in. 

Ask  for  Web-based  tools.  A  service  provider 
should  be  able  to  give  you  a  Web-based  tool 
that  functions  as  a  virtual  network  operation 
center  and  lets  you  log  on  and  get  read-only 
access  from  anywhere.  The  best  tools  let  you 
see  all  components  of  your  WAN,  whether 
they  belong  to  you  or  the  service  provider.  And 
you  should  be  able  to  look  down  into  Layer  2 
of  a  provider's  network,  not  just  Layer  3. 

Think  about  who  owns  the  fiber.  Service 
providers  that  own  the  fiber  and  copper  they 
use  claim  that  this  gives  them  a  distinct 
advantage.  Wiring  causes  90%  of  WAN 
problems,  and  the  owners  of  the  wire  are 
closest  to  it.  They  can  gather  more  statistics 
and  get  things  fixed  quickly. 

Providers  that  don't  own  wire  argue  that 
when  you  hand  management  of  your  network 
over  to  a  carrier  who  does,  you  have  a  fox 
watching  the  hen  house.  Those  providers  are 
measuring  their  own  performance,  so  there  is 
an  inherent  conflict  of  interest. 

Use  SLAs  to  judge  a  service  provider's 
confidence.  The  details  of  a  service-level 
agreement  (SLA)  can  tell  you  a  lot  about  service 
providers  and  the  performance  levels  to  which 
they  feel  they  can  commit.  SLAs  need  to  focus 
on  the  availability  of  your  network,  not  how 
quickly  a  problem  gets  reported.  Make  sure 
"response"  doesn't  just  mean  opening  a 
trouble  ticket,  and  be  careful  to  distinguish 
between  "restore"  and  "resolve."  Restoring 
is  a  quick  fix  to  get  the  network  back  up,  while 
resolving  involves  changing  things  so  the 
network  doesn't  go  down  again. 

Reporting  is  an  important  part  of  SLAs  — 
the  type  of  reports  you  will  get  on  the  per¬ 
formance  of  your  network,  how  often  you  will 
get  them  and  in  what  format,  and  how 
readable  they  will  be. 
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Name 


John  Hoh 


Job  Description 


Work  with  companies  to  identify 

product  sales  patterns  and  use  that  data  as  a 

tool  to  improve  business. 


Experience 


Designed  a  point-of-sale  data  warehouse  for 
Panasonic,  helping  them  analyze  buying  patterns  in 
order  to  reduce  back  orders  and  excess  inventory. 
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IBM  Global  Services 

People  who  think.  People  who  do.  People  who  get  it 
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Continued  from  page  60 

And  analysts  say  Imhoff’s  staffing 
woes  are  not  unusual.  “I’ve  been 
stunned  by  how  lean  the  networking 
staffs  at  user  organizations  are,’’ 
Dataquest’s  Carney  says.  “Our  studies 
show  that  80%  of  companies  with 
$100  million  or  more  in  revenue  have 
1 0  or  fewer  people  running  their  net¬ 
works,  and  75%  have  five  or  less.” 

In  fact,  the  tight  labor  market  may  be 
the  single  biggest  reason  right  now  to 
outsource.  Even  if  you  do  have  the  bud¬ 
get  to  pay  the  six-figure  starting  salaries 
for  all  the  Cisco  Certified  Internet¬ 
working  Engineers  you  need,  there  aren’t 
enough  to  go  around.  There  is  simply  no 
way  you  can  match  the  pooled  expertise 
and  world-class  talent  that  service 
providers  have  on  their  staffs. 

Helena  Chemical  Co.  in  Memphis, 
Term.,  is  another  company  that  turned 
to  outsourcing  because  it  needed  to 
move  quickly  and  didn’t  have  the  staff 
to  pull  off  a  major  WAN  upgrade.  The 
agrichemicals  producer  was  replacing 
an  old  mainframe  and  AS/400  network 
as  part  of  a  Y2K  project  and  needed  a 
new  WAN  to  connect  its  corporate 
headquarters,  four  manufacturing 
plants,  14  divisional  offices  and  210 
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espite  the  superior  convergence  capabilities  of  ATM 
and  the  ubiquity  of  the  Internet  and  IP,  frame  relay  is 
still  the  core  of  the  WAN  and  managed  network  ser¬ 
vices  market. 

And  industry  experts  expect  to  continue  to  see 
growth  in  frame  relay  services. 

However,  one  consequence  of  outsourcing  is  that  cus¬ 
tomers  are  caring  less  and  less  whether  their  networks  are 
running  native  IP,  IP  over  ATM,  IP  over  frame  relay  or  what¬ 
ever.  "When  you  are  just  buying  transport,  you  have  to  pick 
the  technology,"  says  John  Gennaro,  director  of  managed 
data  services  for  Global  One  in  Reston,  Va.  "But  if  you  move 
into  managed  network  services  (MNS),  it  doesn't  matter  as 
much." 

According  to  one  school  of  thought,  MNS  companies 
have  a  relatively  small  window  of  opportunity.  Virtual  pri¬ 
vate  networks  (VPN)  are  going  to  take  over,  driven  by  the 
popularity  of  the  Internet. 


"You  might  see  companies  going  from  in-house  WAN 
management  to  managed  VPN  services  instead  of  man¬ 
aged  WAN  services,"  says  Chris  Carlson  of  Carlson 
Consulting  Group,  a  network  consultancy  in  Reston,  Va. 
"It's  very  easy  to  see  the  cost  savings  with  VPNs,  while  it's 
very  fuzzy  with  MNS." 

For  now,  VPNs  are  being  offered  largely  by  big  ISPs, 
which  are  trying  to  position  them  as  an  alternative  to  man¬ 
aged  network  services. 

MNS  providers  almost  unanimously  say  that  VPNs 
aren't  ready  for  prime  time.  Because  they  run  over  the 
public  Internet,  VPNs  aren't  as  inherently  secure  as  dedi¬ 
cated  frame  relay  networks,  and  they  don't  yet  offer  built- 
in  quality  of  service  for  applications  that  need  guaranteed 
latency  levels. 

However,  if  your  performance  predictability  require¬ 
ments  are  relatively  low,  you  should  consider  a  managed 
VPN,  because  it  is  much  cheaper  than  MNS. 


retail  stores  spread  across  48  states.A  lot 
of  the  users  are  nontechnical  types  — 
people  in  remote  locations  who  sell  fer¬ 
tilizer,  pesticides  and  seeds  to  farmers. 
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PHONE  OR  VISIT 
OUR  WEB  SITE 
FOR  DETAILS. 


Get  all  the  advantages  of 
desktop  network  faxing 
without  the  high  capital 
outlay  and  maintenance 
headaches  associated 
with  fax  servers. 


With  .comfax: 

sending  faxes  is  just  as  easy 
as  sending  e-mail 
employees  get  personal  fax 
numbers  to  receive 
faxes  on  their  PCs  without 
special  equipment 

networked  users  get  extensive  fax  capacity,  eliminating  bottlenecks 

For  unbeatable  Net  savings,  visit  our  Web  site  to  open  your 
account  today. 

www.comffax.com/nw 


1-888-9COMFAX 

1-888-926-6329 

e-mail:  desktop@comfax.com 

Free  software  available  on  the  Web 
or  on  CD-ROM 


.com 


i \fax 


The  Internet  Fax  Company 


“It  all  had  to  happen  very  fast,”  says  IT 
Director  Stephen  Kyriakos,  who  was  in 
charge  of  the  Y2K  project.“Our  manage¬ 
ment  was  looking  at  doing  it  internally, 
using  tools  like  Tivoli,  but  I  didn’t  hear 
anyone  talking  about  a  staff  to  use  these 
tools.  I  had  one  network  engineer  on 
my  staff,  and  Memphis  doesn’t  have  a 
big  pool  of  frame  relay  and  WAN  experts 
to  recruit  from.” 

Demand  on  the  WAN  also  fluctuates 
considerably  because  Helena  Chemical 
makes  most  of  its  money  during  the 
spring  planting  season.  Maintaining  an 
internal  staff  year-round  just  to  provide 
24-7  support  during  these  critical 
months  is  highly  inefficient,  so  Helena 
Chemical  turned  to  NetSolve.The  new 
managed  WAN  went  live  this  month, 
and  Kyriakos  is  quite  pleased. 

“The  outsourcing  model  works  very 
well  here  and  makes  us  very  flexible,” 
Kyriakos  says.  It  also  saves  the  company 
money  while  providing  a  higher  level  of 
service.  “The  original  plan  was  to  go 
with  a  dial-up  network,  which  we 
would  have  had  to  manage  in-house.  I 
estimated  the  cost  of  this  and  the  staff  it 
would  take,  and  it  was  more  than  what 
we  are  paying  NetSolve  for  a  dedicated 
network,”  he  says. 

“Our  studies  absolutely  point  to  cost 
savings  for  companies  that  outsource 
MNS,”  says  Yankee  Group  analyst  Kitty 
Weldon.  “We  look  at  four  different  sce¬ 
narios  that  show  savings  ranging  from 
20%  to  53%  —  56%  in  the  case  of  a  four- 
to  five-year  contract.” 

The  tide  starts  to  turn 

Despite  their  misgivings,  many  net¬ 
work  executives  are  beginning  to  real¬ 
ize  that  managed  network  services  is  a 
concept  whose  time  is  coming.  Manag¬ 
ing  a  WAN  is  difficult  enough  now,  and 
growing  network  complexity  is  just 
going  to  make  things  worse. 


“More  of  our  clients  are  considering 
it  now,”  Carney  says.“And  we  are  starting 
to  come  across  venture  capitalists  who 
are  telling  clients,  Don’t  spend  money 
on  building  WANs  —  outsource  them.’  ” 
Carney  adds  that  she  is  also  seeing  an 
increasing  number  of  government 
requests  for  bidders  to  run  proposed 
networks,  not  just  implement  them. 

Adds  James  Slaby,  Giga  senior  indus¬ 
try  analyst:  “You  need  to  keep  your  best 
and  brightest  people  challenged  and 
working  on  the  most  strategic  projects, 
like  the  transformation  to  electronic 
business.  These  are  scary  new  waters 
that  people  have  to  navigate,  and  they 
don’t  need  the  distraction  of  managing 
a  WAN  infrastructure.” 

Breidenbach  is  a  consultant  and 
freelance  writer  in  San  Mateo,  Calif.  She 
can  be  reached  at  SBreide@aol.com. 


Online 


Find  out  more  about  service-level 
agreements  and  the  different  sizes, 
shapes  and  scopes  of  service 
providers  in  two  stories  exclusive 
to  Fusion. 

Plug  some  numbers  into  NetSolve's 
online  WAN  management  cost 
analyzer. 

Refer  to  Comdisco's  white  paper 
on  evaluating  managed  network 
services  and  AOC  Kentrox's  white 
paper  on  frame  relay  circuit 
management. 
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Practical  an  »wers  to 
real>life  questions 

You  know  what  VPNs  promise:  cost  savings,  business 
efficiencies  and  improved  relationships  with  your  partners. 

But  once  that's  understood,  are  you  prepared  to  deal  with 
the  technical  issues  of  planning  a  full-scale  VPN  deployment 
enterprise-wide?  Integration  issues,  scalability,  site-to-site 
viability,  security,  mission-critical  performance  and  service-level 
guarantees  are  just  a  few  questions  you  should  be  considering. 

Practical  VPN  Deployment:  The  Next  Step  is  a 

one-day  seminar  designed  to  give  you  a  clear  understanding 
of  these  technical  issues  and  how  to  meet  them  head  on. 
Seminar  director  Eric  Zines,  Senior  VPN  Consultant  with 
TeleChoice,  Inc.,  will  explore  the  greatest  challenges  of  VPN 
deployment,  and  provide  solutions  for  doing  so  successfully. 
He'll  also  share  the  success  stories  of  early  adopters,  including 
their  trials  and  tribulations  on  their  way  to  success, 


6  Reasons  Not  to  Miss  This  Seminar 

1.  Understand  the  most  common  pitfalls  in  building  an 
enterprise-class  VPN,  and  learn  to  avoid  them. 

2.  Learn  how  others  are  growing  theii  VPN  pilots  to  support 
mission-critical  applications. 

3.  Understand  how  to  grow  your  VPN  to  match  your  performance 
requirements. 

4.  Learn  to  integrate  existing  security  measures  with  your  VPN  plans. 

5.  Understand  how  to  deploy  the  different  types  of  VPNs: 
remote  access  and  site-to-site. 

6.  Have  your  key  questions  answered  by  the  leading  VPN  vendors  and 
service  providers. 


Learn  from  the  Leader 

ffiggSBI  directed  by 

BHBi  Eric  Zines,  TeleChoice,  Inc 


Network  World  Technical  Seminars  is  known  throughout  the  networking 
community  for  providing  IT  professionals  with  expert,  unbiased  education 
on  the  latest  technologies  and  trends  shaping  today's  mission-critical  networks. 
This  reputation  combined  with  our  100%  satisfaction  guarantee  makes  us  the 
educator  of  choice  in  the  networking  industry. 


On-Site  Seminars 


(800)643-4668 


Bring  a  customized  version  of  this  seminar  to  your  company. 
Contact  Bill  Bernardi  at  (508)  820-7506  Or  bbernard@nww.com. 


1999  Seminar  Tour 


New  York,  NY  •  September  23 
Hartford,  CT  •  September  24 

Research  Triangle  Park,  NC  •  October  13 

Miami,  FL  •  October  14 

San  Francisco,  CA  •  November  3 

Irvine,  CA  •  November  4 

Chicago,  IL  •  December  8 

Detroit,  Ml  •  December  9 


Register  Today! 

$450  Registration  Fee 


For  complete  program  agenda  and 
registration  information,  contact  us  at 


Take  advantage  of  our  Team  Discounts 

2  registrants— $400  each 

3  registrants— $350  each 
Every  4th  registration  is  FREE 
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Networking  at  the  Crossroads 

WASHINGTON,  D.C.  CONVENTION  CENTER 
EXHIBITS:  JANUARY  25-27,  2000 
CONFERENCE:  JANUARY  24-27,  2000 


www.comnetexpo.com 


Manage  a  dynamic  enterprise  network.  Harness  the  power 
of  the  public  network.  Implement  a  seamless,  integrated  com¬ 
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ORRELATION 

myth 
to  reality 


f 

n  a  darkened  network  operations  center,  operators  and 
engineers  mill  about,  performing  their  routine  morning  rit¬ 
uals,  drinking  coffee,  reading  e-mails  and  checking  log  files. 

A  large  display  dominates  the  scene,  providing  a  topol¬ 
ogy  map  that  changes  color  with  the  status  of  each  node. 
An  idle  event  browser  is  displayed  next  to  the  map.  All  of 
a  sudden,  the  event  browser  goes  berserk,  scrolling  faster 
than  the  human  eye  can  follow;  the  map  turns  a  solid 
red,  and  the  phones  start  ringing  nonstop. 

The  operators  spring  into  action,  frantically  banging  away  on 
every  available  keyboard  in  an  effort  to  determine  what  went 
wrong.  The  operations  manager  bursts  in  and  bellows,  ‘‘What’s 
going  on?"  The  lead  operator  barks  back,  “We  don’t  know  yet,  we’re 
working  on  it." 

In  exasperation,  the  manager  looks  up  at  the  ceiling,  sighs  deeply 
and  asks,  “Why  can’t  I  just  get  a  tool  that  tells  me  what’s  wrong?” 
The  operator  hunches  back  toward  his  console  and  whispers  to 
himself,  “That’s  a  myth,  boss,  that’s  a  myth.” 


This  scenario  is  played  out  on  a  daily  basis  in  cor¬ 
porations  that  increasingly  rely  upon  their  networks 
to  provide  business  services.  However,  it  doesn’t 
have  to  be  like  this.  Event  correlation  is  not  a  myth. 

Sophisticated  network  management  technologies 
are  available  today  that  do,  in  fact,  provide  network 
managers  with  the  ability  to  pinpoint  the  source  of 
network  problems.  However,  selecting  the  right 
products,  getting  them  to  work  together  and  config¬ 
uring  them  properly  is  a  daunting  task. 

The  first  step  is  to  understand  how  event  correla¬ 
tion  works.  An  effective  event  correlation  system  is 
built  upon  three  levels: 

1.  The  object  level,  which  focuses  on  isolating 
problems  specific  to  a  particular  device. 

2.  The  network  level,  which  focuses  on  how 
nodes  in  the  network  are  connected  to  each  other 
and  the  impact  each  node  has  on  its  neighbors. 

3.  The  service  level,  which  is  concerned  with 
applications  that  use  the  network  and  how  failures 
at  the  object,  network  and/or  service  levels  impact 
the  performance  of  a  particular  service. 


Most  organizations  do  not  achieve  effective  event 
correlation  because  they  are  unable  to  establish  the 
relationships  among  these  three  levels. 

Object  level 

At  the  object  level,  conditions  are  monitored  on 
an  individual  object,  and  information  is  processed  to 
isolate  the  root  cause  of  a  problem  pertaining  only 
to  that  object  (or  node  in  the  network). 


When  a  problem  occurs,  the  event  correlation 
engine  (ECE)  needs  to  ask  a  complex  set  of  ques¬ 
tions,  the  answers  to  which  eventually  lead  to  a 
problem  determination. 

For  example,  let’s  say  a  router  generates  an  SNMP 
trap,  informing  the  ECE  that  an  interface  has  just 
gone  down. The  ECE  needs  to  verify  some  base  level 
information  —  that  the  interface  is  really  down  and 
that  it’s  not  supposed  to  be  down. Then  the  ECE  will 
start  asking  additional  questions.  Are  the  I/O  buffers 
overflowing?  If  so,  is  CPU  utilization  maxed  out? 
From  these  pieces  of  information  and  an  intimate 
knowledge  of  the  network,  the  problem  can  be 
identified  —  the  router  is  overutilized  and  needs  to 
be  upgraded. 


Network  level 

The  network  level  is  concerned  with  how 
nodes  are  related  to  each  other  and  how  the  T  > 
ure  of  one  (or  more)  node  will  affect  the  re*  •  : 
the  network. This  needs  to  be  done  by  examv.  r:_ 
the  connections  between  the  nodes  and  <  <•  : 
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structing  a  database  of  these  connections.  The  idea 
is  to  determine  a  set  of  parent/child  relationships 
to  every  node  being  monitored.  Naturally,  this  will 
be  a  many-to-many  relationship  because  nodes 
could  have  multiple  children  and  multiple  parents. 
With  this  information,  the  complete  path  to  any 
node  can  be  known,  and  it  will  be  possible  to  rec¬ 
ognize  that  a  large  stream  of  alarms  are  the  result 
of  a  single  node. 

At  first  blush,  it  may  seem  that  this  information  is 
available  in  the  topology  map. 

However,  topology  maps  can 
miss  things  such  as  alternate 
routes  to  or  from  a  router,  multi¬ 
ple  IP  addresses  associated  with 
a  single  router,  and  Hot  Standby 
Routing  Protocol,  where  two 
routers  act  as  one. 

The  only  effective  method  of 
overcoming  these  shortcomings 
is  to  start  with  the  topology 
information  and  then  refine  it  by 
retrieving  additional  information. 

The  four  ways  to  do  that  are: 

1 .  Retrieve  the  information  from  the  router/ 
switch  configurations. 

2.  Develop  scripts  or  programs  to  access  the  com¬ 
mand-line  interface. 

3.  Leverage  existing  databases  (if  they  exist). 

4.  Manually  populate  the  database  from  existing 
network  documentation. 

Service  level 

At  the  service  level  or  application  level,  problems 
are  not  really  problems  at  all;  they  are  symptoms  of 
some  other  problem,  the  failure  of  a  node  (at  the 
object  level)  or  a  connection  (at  the  network  level) 
or  a  subordinate  service  such  as  Domain  Name 
System  (at  the  service  level). 

The  ECE  needs  to  recognize  that  a  service  has 
failed  and  then  map  the  symptom  to  the  actual 
problem.  Knowing  the  logical  relationships  and  the 
dependencies  among  the  various  network  nodes  is 
the  key  at  the  service  level.  Unfortunately,  each  ser¬ 
vice  is  unique  and  can  have  a  complicated  set  of 
dependencies. 

There  are  tools  that  can  help,  such  as  Application 
Scanner  from  Ganymede  Software.  Realistically,  the 
process  of  finding  all  the  relationships  will  be  an 
iterative  one. 

After  determining  the  dependencies,  it  will  then 
be  possible  to  use  tools  to  measure  the  performance 
of  the  service. There  are  three  basic  approaches  to 
measuring  application  performance: 

1. Use  simulated  transactions. 

2.  Use  agents  on  every  user  desktop. 

3-  Use  agents  on  the  servers. 

Here’s  how  an  event  correlation  engine  would 
work  at  the  service  level:  Let’s  assume  that  an  inter¬ 
face  is  down,  and  suppose  the  marketing  depart¬ 
ment  has  negotiated  a  10-second  response  time  for 
each  Web  page  to  be  displayed.  And  let’s  assume  that 
the  Web  server  makes  SQL  queries  to  a  Sybase  server, 
which  happens  to  be  on  the  other  side  of  the  failed 
interface. 

The  ECE  needs  to  notice  that  the  Web  page  has 
not  been  displayed  in  the  10-second  window,  then 
needs  to  check  through  the  dependencies,  discover 
that  the  Web  server  is  dependent  upon  a  Sybase 
database,  and  that  the  Sybase  server  is  unavailable 
because  the  link  is  down. 

Without  accurate  relationship  information,  the 
ECE  would  be  unable  to  diagnose  the  problem. 


Putting  it  all  together 

Here’s  what  you  need  to  deploy  event  correlation: 

1.  Whether  it’s  autodiscovery  with  a  manage¬ 
ment  platform,  such  as  Network  Node  Manager  or 
NetView  6000,  or  a  manually  populated  database, 
there  needs  to  be  some  way  for  node  information 
to  be  added,  deleted,  and  modified.  Accurate  node 
information  is  the  mortar  and  stone  of  the  network 
management  system. 

2.  Next,  there  needs  to  be  an  ECE.  From  the  con¬ 
ceptual  point  of  view,  this  is 
a  nebulous  thing  where 
event  information  goes  in, 
gets  processed  and  out  pops 
the  root  cause  of  the  prob¬ 
lem.  In  reality,  it  will  more 
than  likely  be  a  set  of  tools 
working  closely  together. 

3.  There  needs  to  be  some 
method  of  notification. The 
typical  notifications  would 
be  to  technical  support  staff 
or  end  users,  and  would  take 
the  form  of  e-mails,  pages,  events  in  a  browser, 
sirens,  flashing  lights  or  all  of  the  above. There  also 
needs  to  be  a  tool-to-tool  notification,  which  would 
be  SNMP  traps  or  User  Data  Protocol  (UDP)/TCP 
socket  connections. 

4. The  network  management  system  should  be 
divided  into  components  that  perform  particular 
tasks.  At  the  top  of  the  system  would  be  the 
Manager  of  Managers  (MOM). The  MOM  will 
receive  alarm  information;  consolidate  the  informa¬ 
tion;  and  provide  an  enterprise  level  view  of  the 
alarm  conditions.  More  importantly,  this  will  be 
where  the  service-level  relationship  database  is 
maintained  and  used.  The  MOM  has  the  big  picture 
and  is  best-suited  to  perform  the  service-level  cor¬ 
relation. There  are  a  number  of  tools  available 
today  that  can  fill  this  role,  such  as  Micromuse 
NetCool, Tivoli  Event  Console  or  Boole  &  Babbage 
Command  Post. 

5. In  a  typical  enterprise  network,  there  will  be 
at  least  three  ECEs  feeding  the  MOM  with  alarm 
information.  Each  needs  to  be  customized  with 
models  for  the  nodes  that  it  manages.  Each  is 
responsible  for  one  layer  of  the  network  infra¬ 
structure,  one  for  the  backbone,  one  for  the 
routers/switches  and  one  for  the  servers. 

Examples  of  ECEs  available  today  include  Veritas’ 
NerveCenter  and  SMARTS’  InCharge. 

Some  additional  tips 

Be  very  wary  of  off-the-shelf  software  packages 
that  claim  to  do  everything  without  needing  any 
maintenance. These  may  provide  a  quick  solution, 
but  they  may  not  provide  the  advanced  functionality 
needed  for  the  long-term. 

In  addition,  these  “do-it-all”  products  tend  to 
lock  the  solution  into  one  technology  base, 
and  as  the  technology  solution  gets  bigger  and 
bigger,  the  development  cycle  gets  slower  and 
slower.  Generally  speaking,  the  highest-quality 
functionality  with  the  quickest  turnaround  time 
will  be  achieved  by  integrating  best-of-breed, 
point  products. 

Establishing  the  relationships  is  the  key  to  suc¬ 
cess,  and  maintaining  the  relationships  requires  a 
database.  However,  don’t  overengineer  the  database. 
Do  not  attempt  to  make  it  into  more  than  it  needs  to 
be.  Keep  it  as  simple  as  possible.  It  could  a  relational 
SQL  database,  or  it  could  be  a  simple  flat  file  or  any¬ 
thing  in  between.  Do  not  allow  the  database  to 
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become  a  stumbling  block. 

Customization  is  another  key  factor  in  long-term 
success.  Ensure  that  the  selected  products  are  cus¬ 
tomizable,  especially  when  it  comes  to  the  models. 

It  is  paramount  that  models  can  be  customized  and 
enhanced  to  match  a  specific  series  of  events.  Each 
network  is  unique,  complete  with  its  own  set  of 
quirks.  A  generic  model  may  provide  a  good  tem¬ 
plate,  but  it  will  almost  always  need  to  be  adjusted 
for  subtle  nuances. 

Finally,  learn  how  to  crawl  before  trying  to  walk, 
and  learn  to  walk  before  try  ing  to  run.  It  would  be  a 
serious  mistake  to  attempt  the  service-level  correla¬ 
tion  before  first  conquering  object-level  and  then 
network-level  correlation.  These  are  the  foundation 
on  which  the  house  is  built,  and  without  them,  the 
structure  will  surely  crumble. 

Robert  Freitas  is  a  network  consultant  and  presi¬ 
dent  of  Freitas  Consulting,  in  San  Ramon,  Calif.  He 
can  be  reached  at  rfreitas@freitasconsulting.com. 
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At  the  top  of  the  event  correlation  hierarchy  is  the 
Manager  of  Managers  (MOM).  The  MOM  will  receive 
alarm  information  from  the  other  components  of  the 
system.  It  consolidates  the  information  and  provides 
an  enterprise-level  view  of  the  alarm  conditions. 
More  importantly,  this  will  be  where  the  service- 
level  relationship  database  is  maintained  and  used. 
The  MOM  has  the  big  picture  and  is  best-suited  to 
perform  service-level  correlation. 
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There  will  be  at  least  three  Event  Correlation  Engines 
(ECE).  Each  is  responsible  for  one  layer  of  the  network 
infrastructure,  one  for  the  network  core,  one  for  the 
routers/switches  and  one  for  the  servers.  This  setup 
provides  a  natural  progression  of  dependency 
information.  The  servers  are  dependent  upon  the 
routers  and  switches  for  their  connectivity.  The 
routers  and  switches  are  dependent  upon  the 
network  core  for  their  connectivity. 
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Network  management 
packages  alert  you 
when  a  network  prob¬ 
lem  arises.  That’s 
helpful,  but  sometimes 
the  information  they  provide  can  be 
a  bit  overwhelming.  When  a  net¬ 
work  device  fails,  all  the  devices 
behind  the  failed  device  indicate  fail¬ 
ure.  Often  finding  the  real  source  of 
the  problem  can  take  as  long  as  cor- 
;  recting  the  fault  itself. 

Enter  InCharge  Switch  Connec¬ 
tivity  Manager  (SCM)  3-0  by  System 
Management  ARTS  (SMARTS).  SCM 
is  a  network  management  package 
that  can  pin  connectivity  problems 
in  switched  networks  right  down 
to  specific  switch,  port  and  trunk 
failures. 

Instead  of  issuing  multiple  alarms, 
many  of  which  simply  reflect  a  fail¬ 
ure  further  up  the  chain,  SCM 
attempts  to  pinpoint  the  actual 
|  device  that  failed.  To  do  this,  SCM 
compares  observed  network  events 
to  problems  listed  in  its  Codebook. 
The  Codebook  matches  network 
alarms  to  known  problems.  Because 
;  it  does  this  in  real  time,  SCM  can 
make  intelligent  and  timely  decisions 
as  to  where  the  network  problem 
j;;  originated. 

SCM  consists  of  a  server  applica¬ 
tion  that  monitors  the  status  of  net¬ 
work  devices,  a  broker  that  coordi¬ 
nates  servers  in  multiple  InCharge 
server  environments,  and  a  Java- 
based  console.  Server  output  can  be 
directed  to  HP  OpenView  and  IBM 
NetView  management  platforms  and 
SNMP  workstations.  In  addition,  SCM 
supports  Remedy’s  Help  Desk  system 
and  Tivoli’s  Enterprise  Console. 

SCM  is  one  of  a  suite  of  applica- 
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Diagnosing 
network  damage 

SMARTS  InCharge  Switch  Connectivity 
Manager  roots  out  network  ills  so  you 
can  cure  the  right  disease. 

BY  JEFFREY  FRITZ 


tions  built  upon  the  InCharge  plat¬ 
form.  It  runs  on  Solaris  2.5  or  above, 
HP-UX  10.2  or  above,  Windows  NT 
4.0  and  AIX  4.2.1  or  above. 

Each  network  device  that  SCM 
monitors  must  be  qualified  by 
SMARTS.  Device  qualification  pro¬ 
vides  SCM  with  knowledge  of  the 
internal  configuration  of  network 
devices,  including  interface  cards, 
ports  and  modules.  Failure  detection 
will  occur  whether  the  device  is 
qualified  or  not,  but  the  more  SCM 
knows  about  the  specific  devices  on 
the  network,  the  more  it  can  report 
regarding  anomalies  and  failures. 

Fortunately,  SCM  comes  with  a 
large  list  of  qualified  devices  from 
network  vendors.  That  means  you 
will  rarely  have  to  have  a  network 
device  specially  qualified.  Still,  if  the 
SMARTS  installation  crew  stumbles 
upon  an  unqualified  device,  it  does 
an  SNMP  walk  to  discover  the  device 
parameters  and  sends  the  output 
back  to  SMARTS’  engineering  depart¬ 
ment  for  analysis  and  qualification. 

Most  of  the  devices  on  our  net¬ 
work  were  known,  but  many  of  the 
ATM  modules  in  our  Cisco  switches 
were  unqualified.  According  to 
SMARTS,  the  device  qualification 
process  takes  a  week  or  so,  but  in 
our  case,  possibly  because  the 
product  was  still  new,  the  qualifica¬ 
tion  process  took  considerably 
longer.  Once  a  device  is  certified 
for  one  user,  it  is  certified  for  all 
users  and  available  in  the  form  of 
software  updates  that  are  free  to  all 
customers  holding  maintenance 
contracts  with  SMARTS. 

To  accurately  report  failures,  SCM 
also  needs  to  understand  the  net¬ 


work  topology.  During  installation 
you  need  to  provide  the  program 
with  a  seed  file  containing  a  list  of 
device  addresses.  SCM  uses  the 
addresses  to  identify  the  various  net¬ 
work  devices,  their  attributes,  and 
their  relationships  with  other 
devices,  including  their  role  in  the 
spanning  tree  and  virtual  LANs.  SCM 
only  looks  at  the  seed  file  when  it 
starts  or  when  you  tell  it  to  from  the 
graphical  user  interface  (GUI)  menu. 

We  think  the  idea  of  a  seed  file  is 
both  bad  and  good.  It  would  be 
nice  if  SCM  did  better  with  autodis¬ 
covery  and  it  wasn’t  necessary  to 
create  a  seed  file  in  the  first  place. 
But  on  the  other  hand,  sometimes 
all  the  network  equipment  in  a  large 
enterprise  network  is  not  controlled 
centrally,  so  being  able  to  exclude 
certain  devices  by  not  placing  them 
in  the  seed  file  is  a  plus.  You  can 
manage  new  devices  at  any  time 
simply  by  using  a  text  editor  to  list 
them  in  the  seed  file  and  telling  SCM 
to  rediscover  the  network. 

What  is  true  of  a  network  today 
does  not  necessarily  apply  tomor¬ 
row.  Therefore  SCM  attempts  to 
adapt  to  topology  changes  in  the 
network.  By  default,  the  SCM  server 
sweeps  the  network  every  six  hours 
looking  for  topology  changes. 

To  see  how  well  SCM  could  find 
and  report  failures,  we  generated 
seven  random  failures  in  our  test  net¬ 
work.  Some  were  simple  single  fail¬ 
ures,  such  as  a  link  being  disconnect¬ 
ed.  Others  were  more  complex, 
involving  several  failures,  such  as 
switch  modules  being  downed  while 
links  were  also  pulled.  In  every  case, 
SCM  was  able  to  diagnose  and  re¬ 


solve  the  problem  we  tossed  at  it 
within  three  minutes.  In  many  cases, 
it  was  able  to  finger  the  problem  in 
less  than  45  seconds.  Usually,  this  is  a 
quick  enough  response  time  to  avert 
a  total  network  catastrophe.  (Check 
www.nwfusion.com,  DocFinder: 

5223,  for  complete  test  results.) 

The  faults  show  up  in  an  Excel- 
like  table  in  the  console  program 
with  each  status  report  showing  as  a 
row  in  the  table.  Some  of  the  error 
descriptions  are  wordy  and  flow  off 
the  end  of  the  screen,  requiring  you 
to  scroll  through  the  table  to  read 
the  descriptions.  Reporting  problems 
in  a  table  makes  sense,  but  there 
must  be  better  ways  of  communicat¬ 
ing  this  information  to  the  user. 


ScoreCard 


InCharge  Switch  Connectivity 
Manager  3.0 


Discovery  30% 

7 

Features  30% 

8 

Reporting  20% 

8 

Documentation  10% 

4 

Installation  10% 

9 

Total  Score 

7.4 

Individual  category  scores  are  based  on 

a  scale 

of  1  to  1 0.  Percentages  are  the  weight  given  each 
category  in  determining  the  total  score. 


SCM  can  alert  netw  ork  managers 
to  trouble  on  the  network  in  the  form 
of  e-mail,  page  or  a  fax.  Additionally, 
the  product  can  generate  a  trouble 
ticket  or  evoke  a  script  that  will  take 
action  to  correct  the  problem. 

Most  of  the  time  SCM’s  analysis 
was  right.  It  diagnosed  five  out  of 
the  seven  failures  correctly. 

However,  SCM  wasn't  perfect.  For 
example,  SCM  correctly  reported  a 
link  outage  caused  by  shutting  down  ; 
port  11  on  the  Local_D  switch.  While 
it  found  the  right  connection,  it  flag-  \ 
ged  the  other  switch  at  the  end  of 
the  link  (Local_A)  as  the  culprit.  This 
was  strange  because  the  connection 
was  redundant  and  there  was  still  a 
live  connection  to  the  switch. 

In  another  case,  SCM  correctly 
reported  switch  LAB_C  was  out  of 
service  (because  it  was  completely 
disconnected  from  the  network).  It 
accurately  reported  two  disconnected 
56K  bit/sec  serial  links.  However, 

SCM  neglected  to  report  that  the 
Ethernet  interface  on  the  same 
switch  was  also  down.  This  was  an 
oversight,  because  all  three  ports  on 
that  switch  had  been  disconnected. 

Getting  started  with  SCM  is  as 
simple  as  using  the  application. 

Under  NT,  SCM  installs  like  a  typical 
NT  application,  so  you  could  install 
it  yourself.  However,  because  parts 
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of  the  installation  are  complex, 
SMARTS  includes  on-site  installation 
for  its  customers  at  no  extra  charge, 
and  we  recommend  letting  the  com¬ 
pany  handle  the  entire  installation.  A 
full  installation  of  the  NT  product  con¬ 


sumed  30M  bytes  on  our  hard  drive 
and  took  about  half  of  the  day. 

While  SMARTS  did  a  fine  job  on 
the  installation,  we  found  the  com¬ 
pany’s  written  documentation  lacking. 
Perhaps  this  is  because  the  product, 


which  came  out  over  the  summer, 
was  new  during  our  test.  Much  of  the 
photocopied  documentation  we  re¬ 
ceived  was  skimpy,  and  we  were 
unable  to  find  an  index  in  any  of  the 
documentation,  something  sorely 


Once  a  Year 


the  Giants  of 


Networking, 


Communications , 


IT  Management 


Meet. 


Corporate  Networks  99 

November  15-18 
Hilton  New  York  &  Towers 
New  York 


But  Even  Giants  Will  Need  a  Pass . 


Your  FREE  VIP  Pass  to 
Corporate  Networks  99  is 
waiting.  It  provides  you 
with  access  to  hundreds 
of  cutting-edge  vendors, 
keynote  speeches,  and  the 
exciting  new  IP  Solutions  Center, 
an  interactive  pavilion  supplying  answers  to 
some  of  today's  most  pressing  IP  issues. 

Keynote  speakers: 

Tuesday,  November  16 

Marty  Kaplan,  Sr.  Vice  President 
&  Chief  Technology  Officer, 

Long  Distance  Division,  Sprint 

Wednesday,  November  17 

Donna  A.  Lee,  President, 

BellSouth  Managed  Network  Solutions 

Thursday,  November  18 

John  Gallant,  Editorial  Director, 

Network  World 

(Moderator,  Industry  Panel  Shootout) 


How  to  get 
your  FREE  VIP  Pass: 

1.  Register  on-line  at  www.cma.org. 

2.  Register  via  FAST  FAX  by  calling  the  Corporate 
Networks  Fax-on-Demand  line  at  856-423-3427. 
Enter  extension  704,  enter  document  302,  and 
follow  the  instructions.  (Be  sure  to  enter  a  "1" 
before  your  fax  number.) 

Don't  miss  out  on  this  must-attend  event.  Register 
now  for  your  free  VIP  Pass  and  join  the  other 
giants  of  networking  this  November  at  Corporate 
Networks  99. 


The  CMA  Presents 


CORPORATE 

NETWORKS 


g>99 


IP  •  COMMUNICATIONS  •  CONVERGENCE 


November  15  -  18,  1999 
Hilton  New  York  &  Towers 
New  York 

800-262-3976 

www.cma.org 


needed  in  a  product  this  robust. 

SCM  is  definitely  not  a  solution  for 
an  organization  that  intends  to  hire  a 
couple  of  teenagers  to  run  the  network 
after  school.  Although  its  GUI  is  easy  to 
understand  and  logically  laid  out,  the 
package  requires  a  decent  understand¬ 
ing  of  SNMP  and  Management  Infor¬ 
mation  Bases  to  properly  interpret  the 
information  presented  in  the  alarms.  As 
we  have  seen,  SCM  does  not  hit  the 
mark  every  time  in  its  analysis. 

SCM  is  a  sophisticated  program  that 
is  powerful  but  also  pricey.  The  pack¬ 
age  starts  at  $25,000  for  1,000  managed 
switch  ports  and  increases  in  price 
from  there.  However,  if  you’ve  got  net¬ 
work  operators  who  have  good  knowl¬ 
edge  of  the  network  they  are  manag¬ 
ing,  SCM  can  be  an  invaluable  aid  for 
keeping  the  network  running. 

Fritz  is  the  principal  network  engi¬ 
neer for  West  Virginia  University.  He  is 
also  the  author  of  Remote  LAN  Access: 

A  Guide  for  Networkers  and  the  Rest 
of  Us.  He  can  be  reached  atjfritz@ 
wvu.edu.  Fritz  thanks  lab  test  team 
members  Floyd  Roberts,  Ralph  Chap¬ 
man,  Matt  Glotfelty,  John  Bird  Vilseck, 
Ian  Hutzel  and  Ed  Leatherman  for  their 
assistance,  and  Compaq  for  the  loan  of 
the  Compaq  ProLiant  3000  server. 


How  we  did  it 

We  created  a  test  network  consisting 
of  four  Cisco  switches  and  six  Cisco 
routers,  with  connections  over  Ethernet, 
Fast  Ethernet  and  simulated  56K  bit/sec 
High  Level  Data  Control  links. 

We  assigned  two  workstations  run 
ning  Windows  NT  Workstation  4  and 
Service  Pack  5  to  host  the  SCM  broker 
and  client  software.  We  ran  the  In 
Charge  SCM  server  software  on  a 
Compaq  ProLiant  3000  server  with  NT 
4.0  Server  and  Service  Pack  5. 

Prior  to  testing,  we  created  a  seed 
file  with  the  IP  addresses  and  SNMP 
community  strings  for  the  devices  we 
wanted  to  discover.  In  our  case,  we 
wanted  to  discover  and  manage  every 
device  in  the  network  except  for  a  single 
Cisco  1900  switch. 

After  the  SCM  completed  reading  in 
the  seed  file  and  discovering  devices, 
we  divided  our  test  crew  in  half.  Crew  A 
operated  the  SCM  console  while  Crew  B 
generated  a  series  of  random  failures  in 
the  network. 

We  allowed  SCM  enough  time  to 
resolve  an  error  to  as  close  to  100% 
probability  as  it  could  get.  We  then  com 
pared  the  failures  suggested  by  SCM 
with  the  actual  failures  we  had  caused. 

More  details  on  our  test  bed  can  be 
found  at  www.nwfusion.com,  DocFinder: 
5223. 
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E-commerce  experts 


Certification  programs  teach  IT  anti  business  professionals 
the  shills  they  need  to  succeed  online. 


BY  TONY  KONTZER 

ohn  Sturm  may  be  the  ideal  poster  child  for 
the  Internet  economy.  Until  recently,  Sturm 
was  the  director  of  advertising  for  HEB 
Grocery,  a  San  Antonio,  Texas-based  food  and 
drug  retailer  with  260  stores  in  Louisiana, 
Texas  and  Mexico.  But  in  preparation  for  the 
relaunch  of  its  Web  site,  HEB  in  July  named  Sturm 
director  and  general  manager  of  heb.com. 

Suddenly,  Sturm  found  himself  heading  HEB’s  effort 
to  capitalize  on  its  Internet  presence.That  meant  he 
needed  to  supplement  his  sales  and  marketing  back¬ 
ground  with  some  basic  knowledge  of  network  and 
Web  technologies. 

By  taking  courses  in  HTML,  Web  site  planning 
requirements  and  media  design  through  HyCurve,  a 
San  Francisco  firm  that  offers  accredited,  Internet- 


related  certification,  Sturm  was  able  to  develop  a 
more  authoritative  view  of  HEB’s  Web  pursuits. 

“It  helped  me  understand  the  technology  better,” 
he  says.  “Now,  when  I  analyze  our  competitors’  sites,  I 
know  exactly  what  they’re  doing.” 

In  fact,  Sturm  is  so  convinced  by  the  effectiveness 
of  the  HyCurve  curriculum  that  he  intends  to  have 
members  of  his  Web  team  go  through  at  least  one  of 
HyCurve ’s  four  advanced  tracks  —  security,  design, 
programming  and  administration. 

Sturm  and  HyCurve  are  a  reflection  of  corporate 
America’s  rush  to  use  the  Internet  to  connect  with 
customers,  suppliers,  employees  and  partners. 

Unprecedented  demand  for  people  with  a  combi¬ 
nation  of  technical,  business  and  creative  skills  that 
translate  to  the  Internet  has  resulted  in  a  growing 
base  of  knowledge-hungry  professionals  being  served 
by  a  similarly  expanding  assortment  of  certification 
programs. 

And  while  Sturm  is  a  mar¬ 
keter  with  polished  business 
skills  who  sought  some  IT 
training,  large  numbers  of  IT 
professionals  also  are  turning 
to  certification  programs  to 
develop  the  business  skills 
needed  to  become  electronic 
commerce  experts. 

According  to  Andrew  Kraft, 
executive  director  of  the  Asso¬ 
ciation  of  Internet  Profession¬ 
als  (AIP),  the  demand  for 
e-business  certification  has 
grown  so  quickly  that  some 
programs  —  most  no  more 
than  one  year  old  —  already 
are  emerging  as  the  cream  of 
the  crop. AIP  has  accredited  a 
handful  of  such  programs, 
including  ones  from  HyCurve, 
Microsoft  and  Novell. 

“Getting  a  certification  in 
many  ways  is  about  branding 
yourself,”  Kraft  says.  In  other 
words,  it’s  not  just  what  you 
know,  but  where  you  learned 
it.  IBM,  which  has  attempted  to 
portray  itself  as  an  e-business 
leader,  this  summer  jumped  on 
the  certification  bandwagon 
and  released  its  own  program. 


Do  your  homework 

Andrew  Kraft,  executive  director  of  the  Association 

of  Internet  Professionals  (AIP),  offers  these  tips 

for  selecting  an  e-commerce  certification  program: 

•  Check  the  AIP  Web  site  at  www.accredit.net  to  see  which 
programs  offer  what  you  need. 

•  Look  for  a  program  that  is  accredited  by  the  AIP. 

•  Once  you've  narrowed  your  list  to  six  or  seven  prospects, 
zero  in  on  the  programs  that  offer  additional  features  that 
might  be  of  use,  such  as  instruction  on  basic  network  or 
general  business  knowledge. 

More  online: 

•  E-commerce  on  college  campuses. 

•  Information  about  certification  programs. 

www.nwfusion.com 


The  curriculum  is  intended  to  help  IBM’s  partners 
harness  the  company’s  e-business  products,  services 
and  technologies. 

IBM  reseller  Mainline  Information  Systems  has 
invested  more  than  $250,000  to  put  at  least  60  peo¬ 
ple  through  the  program.  Nearly  half  of  those  are  IT 
professionals  being  certified  as  solution  designers, 
with  coursework  focusing  on  evaluating  and  imple¬ 
menting  technologies  and  using  open  standards  for 
e-business. Tlie  rest  are  salespeople  obtaining  certifica¬ 
tion  as  e-business  advisors,  gaining  skills  related  to 
vision,  strategy  and  deployment  plans.  Marty  Besley, 
vice  president  of  worldwide  sales  and  marketing  for 
Mainline,  says  recent  customer  feedback  convinced 
him  of  one  key  reality:  Having  IT  staffers  who  were 
more  adept  in  e-business  and  salespeople  who  had  a 
better  understanding  of  IT  technologies  was  crucial 
to  the  firm’s  continued  success. 

“It’s  no  longer  here’s  how  to  make  a  pretty  Web 
page,’”  Besley  says.“It’s  ‘here’s  how  you  re-engineer 
your  business.’  ”  Of  course,  Besley  admits  that  there  is 
a  potential  downside  for  employers  who  pay  for 
employees  to  be  certified.  While  employers  benefit 
from  the  valuable  skills  the  employees  learn,  certifica¬ 
tion  also  may  fuel  employee  turnover. 

HyCurve  CEO  Carolyn  Rose  says  that’s  a  short¬ 
sighted  view,  and  that  investing  in  their  professional 
development  actually'  increases  employees’  loyalty.  But 
Rose  acknowledges  that  it’s  also  a  real  risk. 

“They  come  out  with  incredibly  marketable  skills,” 
Rose  says  of  her  program’s  students.  “They  can  write 
their  own  ticket  in  many  respects.” 

Kontzer  is  a  freelance  writer  in  San  Jose.  He  can 
be  reached  at  tony @  goodink.com. 
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The  BEST  ISSUE 


If  your  product  or  service  is  the  best  in 
the  market  you  need  to  be  a  part  of 
Network  World's  special  Signature  Series 
"the  Best"  issue.  Network  IS  professionals 
will  pore  over  this  annual  issue  which  covers  the 
best  new  products  and  practices  in  networking, 
the  best  companies  to  buy  from  and  invest  in, 
the  best  new  ideas  in  network  management 
and  much,  much  more!  For  more  information  on  advertising  call  (800)  622-1108 


ISSUE  DATE  November  15  CLOSE  DATE  November  1 

VERTISING  BENEFITS 

•  Bonus  Distribution  at  Comdex  Fall,  Las  Vegas  and  to  Wall  Street  analysts 

•  Bonus  Exposure  in  our  "The  Best"  Product  Directory  which  features 
your  company  logo  or  product  photo  and  a  50-word  product  description 

•  Reader  Service 
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/4s  one  of  the  premier  providers  of  internetwork 
consulting  east  of  the  Mississippi,  HPM  Consulting 
bases  much  of  its  success  on  hiring  the  best  people 
and  then  giving  them  the  training  and  employment 
opportunities  to  become  even  better. 

We  currently  are  seeking  senior  and  mid-level 
engineers  in  the  following  disciplines  for  East 
Coast  and  Midwest  positions. 

•  Network  Security 
Design/Implementation 

•  Network  Management 
Design/Implementation 

•  Internetwork  Design/ 

Implementation 

•  WAN  Design/Implementation 

For  additional  information,  please  visit  our  website 
www.rpm.com  or  mail/fax  your  resume  to: 

RPM  Consulting,  8830  Stanford  Blvd,  Suite  205, 
Columbia,  MD  21045  Attn-  NW 
Fax  (443)  259-2210 

Or  send  your  resume  electronically  to: 

NW@rpm.com 
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DIRECTOR, 
MARKETING 
SERVICES 
IBM  Business  Unit 

Company  involved  in  market¬ 
ing  &  distribution  of  computer 
hardware  products  is  seeking  to 
fill  the  position  of  Director, 
Marketing  Services,  IBM 
Business  Unit.  Duties  include 
responsibility  for  creating  & 
implementing  int’l  marketing 
plans  to  increase  resale  of  IBM 
mid-range  products  through 
network  of  business  partners 
(resellers);  creating  imple¬ 
menting  database  of  affiliate 
prospects  thru  new  distributed 
hardware  database  technology, 
marketing  channel/2-tier  strate¬ 
gies,  &C  develop  campaigns  to 
recruit  resellers;  initiating  mar¬ 
keting  programs  for  generating 
revenues  profits,  implement¬ 
ing  public  relations  &  direct 
mail  market  campaigns  aimed 
at  recruiting  affiliates  involved 
in  sale  of  IBM  mid-range  hard¬ 
ware  servers  such  as  AS/400, 
RS6000,  Sc  Netfinity  products. 
Qualified  applicant  should  have 
a  Bachelor  or  equiv  in 
Marketing,  Business  Admin,  or 
Communications  Sc  Marketing 
Management  Sc  3  yrs  relevant 
exp.  Excellent  salary  Sc  benefits 
pkg.  Send  resume  to  HR 
Director  (DM1),  Hall-Mark 
Global  Solutions,  123  Gaither 
Dr,  Mt  Laurel,  NJ  08054.  EOE, 
M/F/D/V.  We  promote  a  drug- 
free  workplace. 


Position  for  Programming 
Analyst.  Denver  Metro  Area. 
To  define  and  develop  test  strat¬ 
egy  and  testing  plans  using 
SQL,  Unix  scripting  language, 
and  telephony  backbone 
knowledge  for  each  of  employ¬ 
er’s  Unix  based  and  Windows 
based  telecommunications  soft¬ 
ware  programs.  To  execute  test 
cases  and  scenarios  using 
Mercury  Interactive  tools  and 
Database  SQL.  To  track  testing 
progress  through  software 
problem  tracking  system.  To 
insure  that  the  programs  are 
testable,  maintainable,  and 
meet  business  process  require¬ 
ments  by  assisting  program¬ 
ming  team  with  maintenance  of 
object  oriented  programming 
language  such  as  C++.  To  ana¬ 
lyze  and  document  the  operat¬ 
ing  systems  requirements  neces¬ 
sary  to  operate  the  programs. 
To  prepare  release  notes  of  test¬ 
ing  team  to  development  team, 
systems  engineers,  and  clients. 
To  gather  testing  information 
from  program  clients.  To  help 
prepare  user  manuals  describ¬ 
ing  operating  procedures.  To 
provide  help  desk  support. 
Must  have  a  Bachelor’s  Degree 
in  Computer  Science  or 
Electrical  Engineering.  40 
hrs/wk  M-F,  8:00  a.m.  to  5:00 
p.m.,  $58,250/yr.  Apply  by 
resume  to:  Colo.  Department  of 
Labor  and  Employment, 
Employment  Programs,  ATTN: 
Jim  Shimada,  Tower  2,  Suite 
400,  1515  Arapahoe  St., 

Denver,  CO  80202-2117,  and 
refer  to  order  #C04637674. 
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A’Hl’Q 

The  knowledge  behind  the  network 


Lucent  Technologies 

Bell  Labs  Innovations 


The  Shape  of  Things  to  Come 

N  6  t  C  d  r  6  -  Announcing  the  biggest  partnership  in  the  networking  industry. 

INS  and  Lucent  Technologies  are  merging  to  become  NetCare!  By  joining  forces,  we  will  have  the  most  extensive  and  complete  array  of  solutions  and  services  for 
next-generation  networks  ever  offered  by  one  company.  Lead  the  revolution/evolution  of  communications  networking  solutions  for  enterprise  and  service  providers 
worldwide  with  a  common  commitment  to  support  multivendor  communications  networks.  You  could  say,  the  shape  of  things  to  come  is  already  here. 


•  NETWORK  SYSTEMS  ENGINEERS 

•  SECORITY  ENGINEERS 

•  NETWORK  MANAGEMENT  ENGINEERS 

•  VOIGE/DATA  NETWORK  ENGINEERS 

Your  future  is  about  to  be  changed.  Join  an  exceptional  team  of  Network  Consultants  within  one  of  the  “Top  100  Companies  To  Work  For”  (Fortune  magazine), 

and  enjoy  exceptional  growth  potential,  competitive  salaries  and  outstanding  benefits.  If  you  possess  a  fervent  level  of  energy  and  the  desire  to  make  a  difference, 
e-mail  your  resume  to:  staffing@ins.com  please  reference  ATR-NTWK  EOE 


www.ins.com 


www.lucent.com 


NetWOrkWOrld  Networking  Careers 


We've  Get 


You've  Get 


►Over  1  million  readers,  viewers, 
and  attendees 

►The  latest  breaking  enterprise 
networking  news 

►A  focus  on  management  strategies 

►Cost  effective  advertising  strategies 

►Online  recruitment  advertising  opportunities 

►Career  fair  programs  in  conjunction  with 
technical  trade  shows 


►Information  technology  employment 
opportunities 

►The  need  to  reach  our  niche  audience 

►A  print  strategy  with  trade  publications 

►An  online  recruitment  advertising  focus 

►A  marketing  opportunity  with  an 
employment  focus 

►The  opportunity  to  put  your  message  in 
front  of  your  next  candidate 


To  Get  More  on  What  We've  Got 

Talk  to  Network  World  1-800-622-1 108  Ext.  7542  ♦  Fax:  508-820-0607 
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SR.  PRODUCT  MANAGER  &  PRODUCT 
MANAGER 

Positions  located  in  Carpinteria,  CA 

Explore  an  exciting  future  with  Unisys  PulsePoint  Communications,  an  innovative 
company  delivering  exclusive  modern  generation  systems  for  the  telephony  industry. 
Ideally  located  on  the  Central  Coast,  we  offer  our  professionals  the  stability  and  re¬ 
sources  of  a  large  company,  while  instilling  an  entrepreneurial  spirit  at  the  forefront  of 
technology.  If  you're  a  driven  individual  interested  in  excelling  with  the  best  in  a 
lucrative  field,  consider  joining  our  team. 

SR.  PRODUCT  MANAGER 

In  this  high-caliber  role,  you  will  evaluate  plans  and  implement  the  introduction  of 
new  applications  and  technologies  for  our  EAP  product  lines.  You  will  oversee  unified 
messaging,  speech  products,  calling  services  and  WAP  applications.  Requires  a  sea¬ 
soned  professional  with  5+  years  of  product  management  experience  in  the  computer 
or  telecommunications  applications  software  industry.  You  must  have  proven  success 
in  technology  evaluation/acquisition,  partnership  development  and  contract  negotia¬ 
tion,  as  well  as  a  history  delivering  at  least  1  complex  product  through  several  release 
cycles.  An  adept  communicator  with  exceptional  business,  project/program  manage¬ 
ment  and  organizational  skills  is  essential.  The  ideal  candidate  is  a  strategic  thinker 
and  visionary  with  a  BA/BS  in  Engineering,  an  MBA  and  exceptional  leadership  and 
motivational  abilities. 

PRODUCT  MANAGER 

You  will  oversee  all  products  and  capabilities  related  to  EAP  support  of  circuit  switches, 
wireless,  data  and  Internet  networks.  Responsibilities  include  defining  customer  re¬ 
quirements  and  product  strategies.  Requires  an  energetic  team  player  with  2+  years  of 
product  management  and  technical  marketing  experience  in  the  data  networking  in¬ 
dustry  in  a  technical  or  quasi-technical  position.  Excellent  motivational,  presentation, 
project  management  and  follow-through  skills  are  essential.  The  ideal  candidate  is  an 
individual  with  a  data  networking  background  and  an  interest  in  the  emerging  market 
for  IP  telephony. 

Enjoy  competitive  compensation  and  an  excellent  benefits  package.  For  consideration, 
send  resume  to:  Sue  Whitfield,  HR  Director,  Unisys  PulsePoint  Communications,  6307 
Carpinteria  Ave.,  Carpinteria,  CA  93013.  FAX  (805)  684-2728.  E-mail: 
HRdept@plpt.com.  Principals  only.  No  telephone  inquiries.  EOE. 

UNiSYS 

PULSEPOINT 

COMMUNICATIONS 


Wow!!!  What  a  great  site.  I  used 


this  site  to  announce  my  availability  and 


within  two  weeks  was  working  at 
a  new  job 

more  money 
and  closer 
to  home!!!55 


high  tech  jobs 


w.dice.com 


e 


AN  EARTHWEB  SERVICE 


Mdice.com 

High  tech  jobs  online 


BERMUDA 

Trout  Trading  Management  Company  Ltd. 


TTMC  SEEKS  EXCEPTIONAL  INDIVIDUALS  WITH  A 
CS,  ENGINEERING  OR  EQUIVALENT  DEGREE  FOR  THE 
POSITIONS  OF  : 

Solaris  Systems  Administrator 

Email:  susanbh@ttmc.com  Fax:  (441)  299-8346 


•  Manages  an 
open-ended 
Bermuda 
mutual  fund 
company  with 
assets  over 
US$1.8  billion. 


•  Operates  24 
hours  a  day, 
trading  on 
global  financial 
markets. 

•  Uses  state-of- 
the-art  technol¬ 
ogy  to  support 
its  fast-paced 
exciting  trading 
environment, 

•  Manages  a 
global  voice 
and  data 
network 
comprised  of 
frame  relay 
circuits.  IPL 
circuits,  rout¬ 
ers.  multiplex¬ 
ers,  networked 
PBX's  and  10/ 
100  base  T 
ethernet. 

•  Compensates 
competitively 
and  provides 
relocation 
assistance. 


Responsibilities  include: 

•  Administer  a  network  of  150+  Sun  UNIX  workstations  and 
servers. 

•  Administer  a  global  real-time  data  delivery  TIBCO  environment. 

•  Administer  TIB  API,  Rendezvous,  HistDB,  and  Marketsheet 
applications 

•  Administer  Legato  Networker  AIT-2  back-up  system. 

•  Solaris  to  NT  Connectivity  using  Disk  Access  and  Exceed. 

The  successful  candidate  must  have  2  to  3-years  of  hands-on  Solaris 
experience.  Background  Solaris/UNIX  knowledge  of;  NIS+,  NFS, 
A5000  Disk  Arrays,  Disk  Suite,  Openwindows,  Disk  Access,  Exceed, 
Perl  and  SQL  is  required.  Exposure  to  HA  solutions,  networking, 
firewalls,  NT  and  financial  trading  systems  are  assets. 

NT  Administrator 

Email:  erinf@ttmc.com  Fax:  (441)  299-8314 

Responsibilities  include: 

•  Administer  approximately  200  pc's  in  multiple  NT  domains  within 
a  WINS  configuration  running  MS  Office  Suite  products. 

•  End  user  PC  software  and  hardware  administration,  maintenance 
and  support. 

•  Administer  25  servers,  including  6  Microsoft  Hydra  Terminal  Serv¬ 
ers,  Lotus  Notes  4.6  servers,  Vinca  co-standy  servers,  Zetafax, 
comm  servers,  etc. 

•  Administer  a  closed  Burstable  T 1  Internet  domain,  including  PDC, 
BDC,  Firewall  and  NT  clients  using  roaming  profiles. 

•  Test/evaluate  new  pc  hardware  and  software. 

The  successful  candidate  must  have  2  -  3  years  of  hand-on  NT  sup¬ 
port  experience  in  a  professional  environment.  Exposure  to  network¬ 
ing,  firewalls  and  Solaris  are  assets. 


NETWORKING  CAREERS 
ON-LINE  ADVERTISING 


WWW. 

nwfusion. 

com 


Network  World  Fusion  offers  a  wide 
range  of  advertising  options  to 
optimize  your  recruitment  efforts! 

Network  World  Fusion  brings  print  and  on-line 
media  together  in  a  powerful  and  unique 
package.  Fusion  spotlights  key  news  and 
feature  articles  from  the  print  edition  of 
Network  World,  adding  another  dimension  for 
your  ongoing  recruitment  efforts 


C  For  more  information  on  Fusion  Advertising  Programs 
(800)  622-1108  Ext.  7542 


COMPUTER  PROGRAMMER.  Progress 
Lighting,  a  manufacturer  of  residential 
lighting,  is  looking  for  a  Computer 
Programmer  at  our  Spartanburg.  SC 
office.  This  position  will  be  responsible 
1)  to  analyze  manufacturing,  distribu¬ 
tion,  warehousing,  order  entry,  invento¬ 
ry,  EDI.  OLAP/data  warehousing,  data 
mining,  purchasing,  and  financing 
requirements  using  structured  method¬ 
ologies  to  develop  program  specifica¬ 
tions  using  MS  SQL,  ORACLE  SQL, 
HTML,  C,  C++,  4GL  Language,  MFC. 
Unix  Shell  Scripting  and  ORACLE 
PL/SQL;  2)  design,  code,  test,  debug 
and  document  programs  for  these 
applications;  3)  install,  enhance  and 
document  new  systems;  4)  devise 
detailed  logic  in  both  pseudo  coding 
and  flow  charts;  5)  write  instructions  to 
guide  operating  personnel  during  pro¬ 
duction  runs;  6)  analyze,  review  and 
rewrite  programs  to  increase  operating 
efficiency  or  adapt  program  to  new 
requirements;  7)  train  workers  to  use 
the  programs;  and  8)  write  mainte¬ 
nance  and  system  level  utility  pro¬ 
grams  for  Unix  environment 
(A1X6000).  A  B.S.  in  Computer 
Science/Electrical  Engineering;  4  years 
in  computer  programming  and  excel¬ 
lent  oral  and  written  communications 
skills  are  required.  The  hours  of  work 
will  be  8:00  am  to  5:00  pm  (40  hours 
per  week).  This  position  pays 
$42, 000/annually.  Send  resume  in 
duplicate  to:  Progress  Lighting,  Myma 
Walker,  Human  Resources  Manager, 
101  Corporate  Drive,  Suite  L,  R0.  Box 
5704,  Spartanburg,  SC  29304-5704 
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Network  managers  -  take  control! 


ARC  MasterSwitch™:  the  right  answer  for 
remote  reboot  requirements 

Imagine  having  the  ability  to  power-on  and  power-off  sensitive 
communications  and  computer  equipment  instantly  in  a  remote 
office  800  miles  away  without  raising  an  eyebrow.  With  APC's 
MasterSwitch™,  you  have  no  reason  to  panic,  and  no  need  to 
dispatch  costly  service  people.  You  control  power  to  remote 
equipment  from  your  desktop  or  laptop  via  Web,  SNMP,  Telnet 
or  modem  connection. 

Today,  power  management  translates  directly  into  high  avail¬ 
ability.  For  network  operations,  the  ability  to  remotely  reboot 
locked  equipment  and  bring  each  device  back  on-line  quickly 
represents  a  big  boost  in  productivity. 

The  APC  MasterSwitch  saves  corporations  thousands 
of  dollars  a  year  by  eliminating  unnecessary  field 
service  technician  calls.  Test  drive  MasterSwitch  and 
see  what  APC's  Legendary  Reliability™  is  all  about. 
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SPRING  COMDEX 


MasterSwitch  benefits  include: 

♦  Eight  independently  controlled 
switchable  outlets  for  remote 
rebooting  of  equipment 

•  Requires  only  1U  of  rackmountable 
space 


Visit  APC's  Web  site  today  to  receive  your  FREE 
APC  Network  Enhancement  Solutions  Kit  and 
test  drive  MasterSwitch  on-line  before  buying! 

KEY  CODE 

http://promo.apcc.com  o434z 

CALL:  (888)  289-APCC  x7579  •  FAX:  (401)  788-2797 


Provides  in  and  out-of-band  connectivity 
to  manage  devices  (Web,  SNMP,  Telnet 
or  modem) 

Tremendous  savings  on  costly  field 
technician  service  calls 


Legendary  Reliability” 


©1 999  American  Power  Conversion.  All  Trademarks  are  the  property  of  their  owners.  MS2A9EP-US  •  PowerFax:  (800)  347-FAXX  •  E-mail:  apcinfo@apcc.com  •  132  Fairgrounds  Road.  West  Kingston.  Rl  02892 
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The  connection  is  obvious. 
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CEO, 

Bozeman, 
via  satellite 
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HR,  Albariy, 
via  ISDN 


'  •  - 


Sales  offiee, 
va  cable  modem 


Key  account, 
.endon,-  -  Frankfurt,  - 


Dr.  Smith, 

Reporter,  Surgut,  Jones  University,  Recruit,  Beijing, 
via  POTS  via  satellite  via  ISDN 


via  Internet 
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Ad  agency,  Houston, 
via  POTS  ~ 

_4 - 1 


Board  member, 
Bermuda, 
via  wireless 


Board  member, 
Algiers, 
via  Internet 


*  j 

Salesman,  Cairo,  Marketing 

via  cell  phone  Bombay, 


Supplier,  Manufacturing, 
Calcutta,  Hong  Kong, 
via  XDSL  via  cell  via  cable  modem 
phone 


Gateway  services  j  Videoconferencing  j  Teleconferencing  j  Webconferencing  j  Managed  events 


Anywhere.  Anyone.  Using  any  technologies,  no  matter  how  dissimilar.  V-SPAN  js  conferencing 
connectivity.  For  more  information,  call  1-888-44V-SPAN  or  610-382-1000  or  visit  www.vspan.com. 


V-SPAN 

Virtual  Connectivity... Anyplace  @  Anytime 
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For  Free  Product  Info  • 


OBSERVE 


AND  PROTOCOL 


NALYSIS  SOFTWARE 


IT  CAN  SEE  ALL  PORTS 


ON  YOUR  SWITCH. 


•Full packet  capture  and  decode  for  over 
300  protocols,  including  TCP/IP  (v4  and 
v6),  NetBIOS/NetBUEl,  IPX/SPX, 
Appletalk,  SNA,  and  DECnet. 


•Switched  mode  sees  all  ports  on  a 
switch  gathering  statistics  from  the  entire 
switch  or  packet  capture  from  any  port  or 
ports.  Finally  a  protocol  analyzer  that 
can  be  used  in  switched 
environments! 


•Long-term  network  trending  collects 
statistical  baseline  data  for  days,  weeks, 
months  or  years  for  review  and 
reporting. 


•Distributed  version  available  for  $1290 
(Includes  1  local  and  1  remote  Probe). 
Additional  Probes  are  $295  per  local  or 
remote  segment  or  switch. 


•Network  Instruments’  optimized 
ErrorTrack™  NDIS  drivers  display  true 
errors-by-station.  Includes  collision 
expert  to  identify  problem  stations. 


•  Track  router  utilization/traffic  in  real  time 


>  Ethernet  (10/100/1000), 
Token  Ring,  FDD  I 


Observer  identifies  network  trouble  spots,  and  costs  thousands  less  than 
expensive  hardware-based  analyzers.  If  you  have  network  slowdowns  would  you 
know  if  they  are  being  caused  by  packet  errors,  broadcast  storms  or  overloaded 
utilization?  Find  out  with  Observer  or  Distributed  Observer. 


Observer’s  Extensions  add  to  the  functionality  of  Observer  and  Distributed 
Observer  by  providing  SNMP  object  tracking,  WEB  browser  based  reporting, 
RMON1/2  Probe  monitoring  and  Expert  mode  post-capture  analysis  -  all  within 
the  Observer  interface.  Network  Instruments’  Probes  are  also  available  as 
Ft  MON  1/2  Probes  for  $295/each. 


«  »  iaira«.a  i  th  -ff&o  m* m  *:->*  r  am  ,  vm 


OBSERVER”  6 


EXPERT  EXTENSION  FOR 
OBSERVER 
$495 


WEB  EXTENSION 
FOR  OBSERVER 
$495 


S1MIVIR  EXTENSION  RIVIOIMCS1  EXTENSION 

FOR  OBSERVER'  FOR  OBSERVER 

_  '*  .  $495  $495 

IqiVmTlT 

See  what  you  have  been  missing!  Call  800-526-7919  fora  FREE  DEMO  or  download  from  our  web  site. 

www.networkinstruments.com 


©  1999  Network  Instruments,  LLC  -  Corporate  Headquarters  (612)  932-9899  FAX  (612)  932-9545,  UK  and  Europe  +44  (0)  1322  303045  FAX  +44  (0)  1322  303056 
info@networkinstruments.com  www.networkinstruments.com  Observer,  Network  Instruments  and  the  "1ST  logo  are  registered  trademarks  of  Network  Instruments.  LLC  Minneapolis.  MN  USA 
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1 -800-775-4GTA 

Web:  http://www.gnatbox.com 
Email:  gb-sales@gta.com 
Tel :  + 1  -407-380-0220  Fax :  + 1  -407-380-6080 


&W6 

The  Simple,  Powerful  &  Affordable 


•  Proven  Firewall  Technology 

•  Network  Address  Translation 

•  Unlimited  User  License 

•  High  Performance 

•  Transparent  Network  Access 

•  Easy  to  Configure  &  Operate 

•  Remote  Web  Based  Management 

•  Cost  Effective 

•  Time  Based  Access  Control 

•  URL  &  Content  Filtering 

•  Email,  Pager  &  SNMP  Trap  Alerts 

•  Email  Proxy 

•  ISDN,  xDSL  &  Cable  Modem  Support 

•  Win95/NT  Management  Client 
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Got  an  old  UPS?  Save  up  to  46% . . . 

. . .  on  a  new  UPS  with  APC's  Reliability  Upgrade  Program 


If  your  UPS  unit  is  old  and 
tired,  eliminate  any  uncer¬ 
tainty  and  doubt  by  trading 
up!  APC's  Reliability 
Upgrade  Program  is  a  cost- 
effective  program  for  cus¬ 
tomers  to  upgrade  to  newer 
and  better  APC  UPS  products. 
Trade  in  your  old  units, 
including  non-APC  units,  for 
a  new  APC  UPS  with  a  full  2- 
year  warranty  with  discounts 
up  to  46% I 

Are  your  old  UPS  batteries  an 
accident  waiting  to  happen? 
Use  APC's  Replacement 
Battery  program  to  replace 
your  old  batteries  with  new. 
Each  replacement  battery  is 
user  replaceable  and  hot- 
swappable.  With  each  pur¬ 
chase  of  a  replacement  bat¬ 
tery,  you  get  free  freight 
back  to  APC  for  disposal  of 
your  batteries.* 


GO  TO  APC's  Web  site 

at  http://promo.apcc.com 

and  enter  keycode  o617z  or  call  888-289-APCC 
x7744  to  find  out  more  about  APC's  Reliabilty  Upgrade 
Program,  the  quickest  way  to  protect  your  valuable 
hardware  with  a  new  APC  unit  or  battery. 

Or  contact  APC  to  receive  your  FREE  68-page  guide  to 
Power  Protection. 


'Available  in  the  US  only. 


Legendary  Reliability' 

©1999  APC  All  Trademarks  are  the  property  of  their  owners  APC4A9CP-US  •  E-mail  apcmfo©apcc  com  •  132  Fairgrounds  Road.  We*t  Kingston.  Rl  02892  USA 
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Universal 


The  race  is  over.  The  BLACK  BOX®  ServSwitch™  USB  is  here. 

The  world's  first  USB-compatible  KVM  switch  puts  you  on  the  fast  track 
to  savings,  simplification,  and  server-room  success.  You  only  need  one  keyboard, 
monitor,  and  mouse  to  control  your  servers-via  Universal  Serial  Bus  links! 

Just  imagine  the  hot-swapping,  plug-and-play,  cross-platform  capabilities! 
ServSwitch  has  saved  our  customers  more  than  $100  million  worldwide,  and  all 
Black  Box  products  are  backed  by  the  best  support  services  in  the  industry.  Other  companies 
just  can't  beat  our  free  consultations,  expert  24-hour  tech  support,  and  top-notch  warranties. 

Sure,  we  did  it  first.  But  the  real  winner  is  you. 

Expect  more.  Save  more.  Choose  BLACK  BOX. 

<*BUCK 


For  ordering  information,  call  us  toll  free  at 
877-877-BBOX  (2269).  For  a  free  technical  consultation, 
call  our  Tech  Support  experts  at  724-746-5500. 
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AT  WORK,  ITS  OURS 


Little  Brother  Displays: 

Who  uses  the  Internet 
What  kind  of  bandwidth  they  are  using 
Where  your  users  are  going 
When  your  users  visited  sites 
How  much  bandwidth  they  used 


r 

\ 

1 

BR* 

T 

HER 

546  Valley  Way,  Milpitas,  CA  95035 
Ph:  1.800.200.9881  Fax:  408.263.9883 
sales@littlebrother.com 
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How  Do  You  ReBoot 
Remote  Equipment? 


With  Sentry! 


Now  with  Sentry,  you  can  reBoot  any  locked-up 
internetworking  device  throush  a  standard  dial-up 
modem,  over  an  ethernet  network  via  TCP/IP  usins 
Telnet,  through  a  JAVA  interface  or  with  SNMP 
support.  The  Sentry  family  of  products  provides 
an  easy  practical,  and  secure  solution  for  power 
management  of  remote  internetworking  equip¬ 
ment.  Select  the  Sentry  model  best  for  you. 


See  our  complete  product  line  at: 

Web:  www.servertech.com 

Phone:  1-800-835-1515  or  1-408-745-0300 


Commander 
110  VAC  and 
230  VAC 

•  1  u  rack 

•  Windows  NT 
Shutdown  support 

•  Console  port  access 

•  Multi  password 
levels 


Group  name 


functions 


Link  up  to  26  units 


Reboot  control 


Benefits 

•  Reduces  field 
service  visits  to 
POP  sites 

•  Faster  problem/ID  solution 
response  time 

•  Improved  network  availability 

•  Improved  network  service  levels 

•  Improved  facility  security 


Fax:1-408-745-0392 


_ K 

Another  great  product  from  j  /  |> 

Server  Technology  Inc. 


©  1999  Server  Technology  Inc.  Sentry  is  a  trademark  of  Server  Technology  Inc. 
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If  you  do  this 
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Datum  -  San  Jose,  800/348-0648  408/578-4161  http://www.datum.com 
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Microsoft  | 


It  all  comes  down  to  questions.  Questions 
that  challenge  your  expertise  about  Microsoft 
products.  Question  yourself  -  are  you  ready? 
Be  absolutely  sure.  With  Spike  and  the  gang's 
certification  guarantee,  you  will  be.  Because 
once  you've  completed  the  program,  you'll  pass 
with  flying  colors  or  get  your  money  back.* 
And  don't  worry,  because  as  Microsoft 
Certification  changes,  Transcender  will 
have  you  covered. ..without  question. 


Most  Realistic  MCSE  and  MCSD 
Simulations  Available 
Detailed  Answers  and  Explanations 
NEW!  Computer  Adaptive  Testing  Features 
NEW!  Simulation  Questions 
Money  Back  If  You  Don't  Pass  Guarantee* 
From  $129  -  $179 


Transcender.  America’s  #1  Exam  Preparation  Software.  TrSflSCGridSP 

Corporation 


To  order,  call  Howard  @  (615)  726-8779  or  fax  (615)  726-8884;  242  Louise  Ave.;  Nashville,  TN  37203. 


www.transcender.com 


©  1999  Transcender  Corp.  All  Rights  Reserved.  Microsoft  is  a  registered  trademark  of 
Microsoft  Corporation.  Multi  user  licenses  are  available.  *Call  or  see  our  Web  site  for  details. 
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Set  work  Huy  •  The  Hub  of  the  Net  work  Buy  > 
te  Network  Bu  y  •  The  Hub  of  the  JSei'w  L  Vi 


■ 


1  As  a  recipient  of  the  prestigious  European  Industry  Forum 
I  Award  for  design  excellence,  the  NSR  is  second  to  none  in 

I  both  form  and  functionality.  NSR’s  sleek,  modular  design 

H  allows  you  to  store  multiple  servers  while  it  manages  the 
■  transition  and  growth  of  your  advanced  network. 

I  •  Maximizes  storage  capacity  while  it  minimizes  floor 
]  space  requirements. 

•  Compatible  with  virtually  any  network  server. 

•  Ships  pre-assembled  with  advanced  standard  features. 

•  Quick  and  easy  installation  and  reconfiguration. 

Maximum  security  and  protection  from  overheating. 


Network 

Server 

Compatibility 

IBM 

HP 

Compaq 

Dell 

Gateway/ALR 
NEC  Express 
and  more... 


Call  today  for  a  free  brochure 


enclosure  products 


Outstanding 


Compatibility, 


Modularity, 


Security, 


Protection 


Industry  Forum  Riosrd  [dinner 
Far  Design  Excellence. 
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Remote  Reboot  Over  Telnet! 


Reboot  your  Network  Equipment  via  Telnet,  Dial-Up  and  Local  Console 


Network  equipment  sometimes  "locks-up"  requiring  a 
service  call  just  to  flip  the  power  switch  to  perform  a 
simple  reboot.  The  NPS  Network  Power  Switch  gives 
network  administrators  the  ability  to  perform  this 
function  from  anywhere  on  the  LAN/ WAN,  or  if  the 
network  is  down,  to  simply  dial-in  from  a  standard 
external  modem  for  out-of-band  power  control. 

✓  TCP/IP  Security 

✓  Individual  Plug  Passwords 

✓  Dual  15  Amp  Power  Inputs 

✓  Eight  (8)  Individual  Outlets 

✓  Modem  and  Console  Ports 

✓  Co-Location  Features 

✓  115-VAC  and  230-VAC  Models 

✓  Modem  and  Telnet  Auto  Reset 


Individually 
Programmable 
Outlet  Plugs  (8) 


lOBase-T  Ethernet 
Interface 


19”  Rack  Brackets 
Allow  Front,  Back,  or 
Center  Mounting 


Dual  15  Amp 
Power  Circuits 


Modem  Port  for 
Out-of-Band 
Management 


□  western* 

D  telematic  inc. 


Local  RS232 
Console  Port 


(800)  854-7226  •  www.wti.com 


5  Sterling  •  Irvine  •  California  92618-2517  •  (949)  586-9950  •  Fax:  (949)  533-9514 


For  Free  Product  Info  •  www.networkworld.com/infoxpress 
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Control  2  to  256  computers 
with  just  one  pair  of  hands. 


Raritan  KVM  switch  products  save  time, 
space,  and  money  by  enabling  users  to 
control  multiple  computers  from  a  central 
user  console  (keyboard,  monitor,  and 
mouse).  Whether  you  are  running  two 
PCs  at  your  desk,  or  need  multi-user 
access  to  hundreds  of  multi-platform 
servers  in  a  data  center,  or  have  any 
requirement  in  between,  Raritan  has 
your  solution.  And  every  Raritan  switch 
features  a  dedicated  microprocessor  on 
every  port,  preventing 
keyboard/mouse 
lock-up  .1 1 nl 
ensuring  flawless 
0  operation. 


www.raritan.com 
1-800-724-8090,  X83 


Reliability  runs  in  the  family. 
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It’s  an  Open  and  Shut  Case... 


ADVANTAGE  2000 

Ip  l  u  s 


814.734.7303  ♦  Fax:  814.734.3907*  Email:  glcc@greatcabinets.com 


C2SE8 

Ibi 

n 

et 
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Are  you  Y2K  compliant??  upgrade  nown 
m  UPGRADE  SPECIAL 


NEWBRIDGE 


ROUTER 


DETROIT 


EMETROCOME 

COMMUNICATIONS,  INC 

AUTHORIZED  NEWBRIDGE  PARTNER 
(800)  364-8838  or  (281)  495-6500 

www.metrocominc.com 
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Out-of-Band  Console  Access 

Server  "Trouble-shoot  network 
problems  from  anywhere  " 


Access  Remote 
RS-232 
Consoles  with 
One  Phone 
Line  or 
Ethernet 


DSU 


Connection 


Hub  Router 


•  Menu  driven  interface,  unique  naming  for  each  device 

•  Modular  design  for  easy  expansion  or  changes 

Optional  Ethernet  (Telnet),  Dial-up  and  local  RS-232  access 
Internal  33.6  kbps  modem  with  built-in  lightning  protection 
3,6,9  slot  units,  4-32  devices  supported 

Bay  Tech’s  DS-Series  Data  Switch  is  modular  in  design.  The  base  unit,  access 
modules  and  RS-232  I/O  modules  ordered  determine  the  type  of  access  you  have 
and  how  many  devices  you  can  communicate  with.  The  modular  design  also 
provides  easy  expansion,  simply  install  another  four  port  RS-232  I/O  module 
and  you  have  access  to  four  additional  devices. 

Also  available:  REBOOT  LOCKED  EQUIPMENT  with  BayTech 

power  control  solutions 


BayTech 


800-523-2702  www.baytechdcd.com 

International:  228-467-8231  Fax:  228-467-4551 
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Hub  of  the  Network  Buy  •  The  Hub  of  The..' 

Network  Buy  •  The  Hiib  'q 


w.networkworld.com/infoxpresg  ) 


MANAGE  1,000  SERVERS 

from  4  or  more  KVM  stations 


AEROSPACE/MILITARY  COMPUTER  ROOM  PLANT  CONTROL  TRADING  ROOM  CONTROL  CONSOLES  CLASSROOM/CORPORATE 

USA  Office:  10707  Stancliff  Road  Houston,  Texas  77099  Phone  281-933-7673  Fax  281 -933-0044 
UK  OFFICE:  PHONE  +44  (O)  1264  850574  FAX  +44  (0)  1264  850529 


Call  800-333-9343  for  your  catalog 

ELECTRONICS 


WWW.ROSEL.COM 


STATION  2 


STATION  3  £  STATION  4 


EXPANSION  CABLES  CONNECT  ULTRAMATRIX 
FROM  1  TO  1.000  COMPUTERS! 


Rose  has  done  it  again!  The  UltraMatrix  is  a  keyboard-video-mouse  (KVM)  switch  that  has  ail 
the  features,  is  the  simplest  to  use,  and  costs  the  least. 


Simultaneous  access  from  4  or  more  KVM  stations 
Supports  multiple  platforms:  PC,  Sun,  Unix,  others 
Full  keyboard  and  mouse  emulation  for  automatic 
booting 

Expands  easily  with  plug-in  cards 
Sleek  on-screen  display  simplifies  user  interface 
Innovative  cabling  system  makes  installation 
clean  and  easy 
Uses  less  rack  space  than  other  switches 
Security,  access  groups,  user  profiles,  status  GROW  WITH 
screen,  flash  memory,  and  more  ROSE  PRODUCTS 


Rose  has  been  providing  innovative  solutions  since  1984.  We 
have  a  complete  line  of  KVM  switches  for  server  rooms, 
classrooms,  desktops,  and  other  uses.  Ask  us  about  our 
KVM  extenders  using  coax  or  twisted  pair.  We  also 
have  an  extensive  line  of  serial  and  parallel  data 
switches.  Call  us  today  to  discuss  your  application. 
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Put  your  servers  at  your  fingertips  with  Key-View  It:  the  fast,  reliable  hardware 
solution  for  remote  access.  Control  your  server  room  or  branch  servers  from 
any  location,  even  when  the  network  is  down.  Cybex  gives  you  the 
power  that  software  can't  -  access  and  control  of  your  servers,  even 
if  they  are  completely  locked  up. 


Finally,  a  reliable  remote  you  can  always  find! 


Hand  it  to  Cybex 


(800)  932-9239 

www.cybex.com 


COMPUTER  PRODUCTS  CGRPORAfiOH  N 


Cybex,  the  Cybex  logo  and  Key-View  are  registered 
trademarks  of  Cybex  Computer  Products  Corporation 
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FREE  Internetworking  Kit. 

Learn  how  APC  can  make  your  network  more  manageable. 

« ortpr;  'M  http://promo.apcc.com  Key  Code  o626z  •  Call  888-289-APCC  x7713  •  Fax  401  -788-2797 

'•  399  American  Power  Conversion.  All  Trademarks  are  the  property  of  their  owners.  NS4A9EP-US 
F'owerf'ax.  1800)  34/-FAXX  •  E-mail:  apcinfo@apcc.com  •  132  Fairgrounds  Rd..  West  Kingston.  Rl  02892  USA 


PowerStack  from  APC  provides 
power  protection  and  battery 
back-up  for  stackable  data  com¬ 
munications  hubs,  switches  and 
small  routers. 


APC's  Smart- UPS  series  is  perfect 
for  fileservers,  minicomputers, 
internetworking  equipment, 
telecommunications  systems  and 
other  mission-critical  applications. 


APC 

Legendary  Reliability" 


APC  delivers  enterprise-wide  network  up-time. 
Your  full  spectrum  of  network  and  power  pro¬ 
tection  products  are  easily  integrated  in  the 
innovative  APC  NetShelter®. 

APC  NetShelter  simplifies  network  protec¬ 
tion  and  security  by  providing  a  premium, 
freestanding  network  enclosure.  It  arrives 
ready  to  install  and  costs  up  to  20%  less 
than  other  premium  enclosures. 


22U  (38.5")  of  vertical  space  for  industry- 
standard  19"  rackmount  equipment,  yet 
easily  fits  through  a  standard  T  door. 

APC  NetShelter  accommodates  nearly  all 
rackmountable  equipment  lines,  including 
HP,  IBM,  Dell,  Cisco  and  3Com.  Custom 
mounting  kits  allow  easy  installation  of 
many  rack-mount  servers,  disk  storage 
or  accessories. 


NetShelter9 


APC's  NetShelter  simplifies 
network  protection  and  security 
by  providing  a  premium, 
freestanding  network  enclosure. 


TM 


APC's  remote  power  control 
device  that  provides  individual 
outlet  reboot  capabilities  for 
locked-up  equipment. 


APC  NetShelter  saves  floor  space,  organiz¬ 
es  equipment,  eliminates  cabling  "rat's 
nests"  and  physically  protects  your  invest¬ 
ment.  NetShelter  provides  42U  (73.5")  or 


Free  NetShelter  Configurator 
Software  on  CD  or  download¬ 
able  via  our  website  at 
www.apcc.com 


APC  ensures  network  uptime, 
anywhere  and  everywhere 
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Introducing  the  Router  that’s  easier  to  configure. 


Web 
Browser 
Configuration. . . 
It’s  Easier! 

Introducing  The  Emerald,  a 
Frame  Relay  Access  Router  to 
replace  all  others.  Why?  Web 
Browser  Configuration!  Use 
Netscape  4.5  or  MS  IE  4.0  to 
set  up  and  configure  your 
Emerald.  The  Emerald  allows 
you  to  monitor  your  network 
from  your  desktop  using  the 
Web  Browser  you  use  every 
day.  For  less  than  the  price  of 
one  week’s  training  on  those 
other  routers,  you  can  be  up 
and  running  in  minutes! 


Call  800-223-9758  to  receive  a  FREE  demo  Emerald  to  try 
for  45  days.  If  you’re  not  convinced  it’s  the  easiest  router 
you’ve  used,  send  it  back.  What  could  be  easier? 


Take  a  look,  you’ll  like  what  you  see. 


American  Technology  800-777-551  lor  +1-406-777-5511  fax:  406-777-5512  email:  mfo@atli.com 


Lencan 

TECHNOLOGY 

www.atli.com 
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SNMPc  Enterprise 
Manager 

Distributed  management 
for  Windows  NT.  Supports 
remote  consoles  and 
polling  agents,  Web  Trend 


Network 

Management 

for  Microsoft  Windows 


Reporting  and  more. 

SNMPc  WorkGroup 


Manager 

Affordable  management 
for  small  networks. 

With  an  installed  base 
of  over  60,000  copies, 
this  popular  tool  is  resold 
by  major  OEMs,  including 
Cisco  and  ACC. 


A  Castle  Rack 

Download  a  Free  Evaluation 

Computing 

www.castlerock.com 

Phone:  408.366.6540 

Fax:  408.252.2379 
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Try  it  today  at: 


www.networkworld.com/infoxpress 


InfoXpress  is  reader  service  at  its  best.  An  online 
service  designed  to  furnish  readers  with  a  quick  and  easy  way  to 
request  information,  NetWOrkWorld  InfoXpress  offers  readers: 

•  Easier  access  to  more  relevant  information. 

•  The  ability  to  search  for  information  by  reader  service  number, 
advertiser  name  or  product  category. 

•24-hour  service. 

•  Flexibility  in  requesting  information  via  mail,  email,  telephone,  fax  or 
linking  to  the  advertiser  web  page. 

Network  World,  Inc.,  161  Worcester  Road,  Framingham,  MA  01701  •  (800)622-1  10£ 


Netscape:  InfoHpress  -  Network  World 


Go  To:  |http  / /vvv .r>»tworkvorW.com/1nfoxpross 


Info  press 


Free  Product  Information 
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NetworkWorld 


SEI3  LEADER 


IN  NETWORK 


KNOWLEDGE 


Print  -  Online  •  Events 

AN  IDG  COMPANY 


— Tests/Reviews  in  November 

Issue 


Nov.  1 


Nov.  8 


Nov.  22 


Nov.  29 


•  Unix  support  for  Gigabit  Ethernet  pipes. 

•  AG  Group  Watchpoint. 

•  Web  server  performance  analysis. 


•  Issue-oriented  review  comparing  Away 
to  8-way  servers. 

•  Router  accelerators. 

•  User-to-site  VPNs. 

•  Video  servers. 

•  Disk  cloning  software. 

•  Remote  access  cards  for  NT  servers. 


•  SNA  gateway  software. 

•  Loran  Kinnetics  management  software. 

•  Bandwidth  Allocation  to  the  WAN. 


To  reserve  your  ad  space  call 
1-800-622-1108  ext.  7507 


Please  note  that  technology  updates,  and  comparative  and  single  product  review 
dates  and  topics  are  subject  to  change  without  notice. 


Bay  Networks  CaBLeTROQ 


The  Merged  Company  of  SynOptics  and  Wellfleet 


Cisco  Systems 


1 


We  Stock  the  Largest  Inventory  of 
Refurbished  Bay  Networks  in  the  World! 


v  a 


m 


•  Bay  Networks  ESP  Trained 

•  Bay  Networks  Authorized 

•  Full  Product  Line 

•  New  &  Used,  Buy  &  Sell 


•  Proven  Track  Record 

•  Good  As  New  Warranties 

•  Repair  Services  Available 

•  Technical  Support 


MADGE 


Phone  801-377-0074 
Fax  801 -377-0078 
1403  W.  820  N.  Provo,  UT  84601 

Visit  us  On  the  Web  @  www.nle.com 


National  LAN  Exchange 

888.89 1.4BAY  (4229) 

Fast  overnight  delivery 


C.O.D's  Terms 
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Do  you  offer  Training  or  Educational  Services? 


If  so,  call  Enku  today  to  find  out  how  to  place 
your  listing  in  our  Training  Directory. 

Call  800-622-1108  ext.  7465 


NETWORKING 


New  &  Used  Buy  •  Sell  •  Trade 


BAYNETWORKS 

NORTEL 


CISCO 


A5CENP/LUCENT 


Z\ 


CABLETRON 


3COM 


FORE  XYLAN 

ivtvtv.  bizint.  com 

NY  Office/USA  Sales:  ^ — -  „  Main  Office/lnt’l  Sales 

Tel:  (315)  458-9606  DI7I  Tel:  (978)  667-4926 

Fax:  (3 15)  458-9493  \  OILI  Fax:(978)  663-0607 
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Livingston  US  Robotics 

Ascend  ^AY  Micom 
.O  'X 

V  Specialist  in  all 
U  Cisco  products  30 
(/)  including  Memory  ^ 

t*  LAN/WAN  Products  1 

^  .  P 


O.  P 

O  New,  Used,  Lease, 

3Com  _  Rent  Codex 

Adtran  ^  Xylogics 

Motorola  Wellfleet 

We  carry  all  Manufacturers 


Millennium  Solutions  Group,  Inc. 


•Routers,  Bridges  'Frame  Relay 
•DSU/CSU's  »Hubs,  Modems 

•Switches,  ATM  *Voice  over  Data 


We  Buy  and  Sell 

888-801-2001  Fax  (916)  630-2000 
Visit  our  Web  Site  at: 
http://www.millenniumsolutions.net 
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USED  NETWORK  HARDWARE 

.  :  /.  ••  ■  -  >•-'  •  / .  -  - 

Routers  ♦  Switches  ♦  TT/T3  DSU/CSU  •  Access  Servers  •  Cables  ♦  Memory 


V  i 

I 

1  .7N 


i 

In  l 


Ascend  ♦  Livingston  ♦  Adtran  ♦  Kentrox 


" —  . . 

Buy  /  Sell  /  Lease  *  Overnight  Delivery  *  Fully  Guaranteed 

1  t  1  i  t  i  I  ■  i  I  f  ..  .. 


Mi 

i 


Tl)  )•  bil-.Jh)/  ::ii 

Fax  805-964-9405  ,£• ' 


Fax  805-964-9405 

www.networkhardware.comE 

ar^Resa;ef1pS,r  C44£  c*.  real 
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Certified  NetAnalyst 

(800)  645-8486 

WWW.PINEMOUNTAINGROUP.COM 
■  Protocol  &  Analyzer  Training 
|  Sniffer,  Fluke,  HP,  Shomiti 


m 


Marcraft  Inti.  Corp. 

|  (800)  441-6006 
Bwww.mic-inc.com/Aplus/cbt 


\  A+  ,  Net+,  CAT5,  LINUX,  Microsoft, 


1  CISCO,  CBT  &  Self-Paced 


_ 


CrossTec’s  NetOp  School  SW 

(800)  675-0729 
1  www.CrossTec.Net 


P  Six  essential  tools  for  the  networked 

H 

i  classroom.  Download  a  Free  Eval 


NCR  Customer  Education  j 

S  (800)  845-2273 
www.ncr.com/trainus 
Cisco,  MCSE,  NT  &  Networking, 
Training 


- 


Cyber  Pass  Inc. 

(613)  237-4991 

I  www.certify.com 
j  A+,  CNE,  MCSE  exam 
j  simulation  software-FREE  to  try! 


|  TCIC 

(800)  322-2202 
|  www.tcic.com 
|  Voice,  Data,  ATM,  CCS7  plus  many 
more,  customization  &  devel.  avail. 


ForeFront  Direct 

;  (800)  475-5831 
j  www.ffg.com 

j  Computer  based  training  for 
the  I.T.  industry 


m 

m 


I  Transcender  Corporation 

(615)  726-8779 
I  www.transcender.com 
'  MCSE,  MCSD,  MCP  Exam 
Simulations 


m  \  ’ 


LearnKey,  Inc. 

(800)  865-0165 
1  www.leamkey.com 
|  Self-Paced  Training  for  Computer 
Users  &  IT  Professionals 


To  Place  Your 
Listing  Here 
Call  Enku  Gubaie 
at  1-800-622-1108 
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Purveyors  of  Networking  Hardware 


NEW 

& 

USED 


Cute  iniin 


pfQtcoo 


Bay  Networks 


caBierRon 

SYsiems 


Hubs  &  More 


i=SynOp1ics 

SMC*  "ffubutics 


BUY 

& 

SELL 


■  CHIPCOM 


LOWER  PRICES  THAN  THOSE  WAREHOUSE  GUYS! 


Lowest  Prices  on  Factory 
Fresh  Equipment 
Up  to  90%  OFF  Retail 
for  Refurbished  Items 
Huge  Inventory  of 
Legacy  Products 
Factory  Trained 
Consultants  on  Staff 

Fax  lis  Your  Want  to  Sell  /  Buy 


Authorized 
Service  Center 
We  Also  Do  Repair 
&  Exchanges 
Same  Day  Shipping 
on  Most  Items 


Same  Day  Delivery 
Via  Counter  Service 


Lists 


516-293-5325 


l  i£[v  cur  Ll \=Lz  iYuvi-  un.lt  Cli-Llli^  £Lic.£[zllic 
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News 


CPN 

continued  from  page  1 

But  most  enterprise  net  cus¬ 
tomers  couldn’t  care  less 
about  the  equip¬ 
ment  their  service 
providers  use  to 
deliver  voice  over 
IP,  Web  hosting, 
application  pro¬ 
cessing  or  other 
offerings.  Indeed, 

Cisco  conducted 
its  own  internal 
survey  on  the 
impact  of  the  CPN  program 
and  found  that  less  than  half  of 
the  enterprises  queried  would 
select  to  do  business  with  a 
CPN  service  provider  vs.  a 
non-CPN  company. 

“It  means  more  to  me  what 
their  uptime  and  strength  of 
the  network  is  than  that  it  hap¬ 
pens  to  be  Cisco  [powered],” 
says  Todd  Dion,  vice 
president  of  tech¬ 
nology'  at  Tutor  Time, 
a  high-tech  child  care 
company  in  West 
Palm  Beach,  Fla.,  that 
uses  Cisco  gear.  “CPN 
doesn’t  butter  my  toast 
that  much.” 

“We  go  through  a 
request  for  proposal 
process  that  looks  at 
several  things  —  price 
and  performance,  and 
this,  that  and  the  other 
—  but  there’s  nothing 
saying  we’re  looking 
for  Cisco  certification 
with  our  ISP,”  says 
Roger  Graves,  systems 
analyst  at  the  State  of 
Mississippi  in  Jackson, 
which  is  another  Cisco 
customer. 

NuSkin  Enterprises, 
a  Cisco  customer 
based  in  Utah,  also  considers 
CPN  certification  to  be  a  low- 
priority  item  when  consider¬ 
ing  a  service  provider. 

“I  don’t  know  if  we’re  pick¬ 
ing  any  ISPs  just  for  that  rea¬ 
son,”  say's  James  Frary,  NuSkin ’s 
senior  network  architect. 
“We’d  pick  them  for  a  lot  of 
other  reasons  —  size,  reliabil¬ 
ity,  all  the  other  junk.” 

On  the  other  hand,  Grey 
Zone  Productions,  a  Web  devel¬ 
opment  company  in  Capitola, 
Calif.,  says  CPN  certification 
was  important  in  its  decision  to 
continue  doing  business  with 
service  provider  Digital  Island. 
But  Grey  Zone  was  in  desper¬ 
ate  straits  when  it  selected 
Digital  Island  a  year  ago. 

Grey  Zone  had  its  servers 


located  in  the  data  center  of 
service  provider  Vaultline 
when  Vaultline  notified  Grey 
Zone  and  other  customers  that 
they  had  five  hours  to  remove 
their  equipment 
because  the  service 
provider  was  going 
out  of  business. 
Digital  Island  step¬ 
ped  in  and  snapped 
up  Vaultline’s  cus¬ 
tomers,  including 
Grey  Zone. 

Grey  Zone  exec¬ 
utives  admit  that 
had  Digital  Island  not  been  a 
CPN  service  provider,  it  would 
not  have  busted  the  deal.  But 
they  say  CPN  has  kept  them  in 
the  Digital  Island  fold  since 
the  Vaultline  predicament. 

“There  was  nothing  that 
was  going  to  keep  me  from 
going  to  Digital  Island,  but  the 
question  was  do  I  stay  for  a 


week  or  do  I  stay  long-term,” 
says  Daniel  Duerr,  Grey  Zone’s 
founder  and  president.  “Here 
we  are  a  year  later  and  we 
never  even  thought  twice 
about  leaving.” 

But  even  CPN  service 
providers  say  the  program  has 
done  little  to  directly  open  up 
new  sales  opportunities  to 
enterprise  net  customers. 
Enterprise  customers  do  not 
demand  or  request  CPN  certi¬ 
fication  when  evaluating  ser¬ 
vice  provider  offerings,  partici¬ 
pants  say,  nor  is  there  a  tangi¬ 
ble  benefit  of  the  CPN  pro¬ 
gram  for  enterprises. 

This  is  in  contrast  to  Cisco’s 
initial  objective  with  the  pro¬ 
gram,  which  was  to  enable 
Cisco’s  enterprise  customers 


to  select  service  providers  that 
had  the  company’s  equipment 
in  their  infrastructure,  accord¬ 
ing  to  Outcalt. 

“There’s  no  hard  data  on 
direct  sales  wins,”  says  Mark 
Jaffe,  chief  operating  officer  at 
Globix  in  New  York.  “But  indi¬ 
rectly,  being  an  organization 
that  uses  exclusively  Cisco 
gear  across  our  backbone  has 
allowed  us  to  win  a  lot  of 
streaming  business  because 
clients  know  we  have  the  abil¬ 
ity  to  multicast.” 

Having  a  Cisco  network 
enabled  Globix  to  win  busi¬ 
ness  with  MSNBC,  Microsoft 
and  the  House  of  Blues.  The 
CPN  designation  did  not  make 
a  difference,  he  says. 

“Having  the  name  Cisco  in 
there  would  lead  to  the  con¬ 
versation  on  multicasting,  but  I 
can’t  tell  you  [the  business 
opportunity]  was  a  direct 


result  of  the  CPN  program,” 
Jaffe  says. 

NaviSite,  an  application  ser¬ 
vice  provider  in  suburban 
Boston,  can’t  point  to  new  cus¬ 
tomer  opportunities  from  the 
CPN  program  but  expects 
some  to  emerge. 

“CPN  members  get  a  lot  of 
visibility  from  being  on  the 
Cisco  Web  site,”  says  Jay 
Seaton,  NaviSite’s  vice  presi¬ 
dent  of  marketing. “That  would 
lead  to  people  who  would  not 
have  seen  us  otherwise. 
Hopefully,  that  would  lead  to 
some  business.” 

Seaton  says  CPN  gives  enter¬ 
prises  the  indirect  benefit  of 
knowing  that  their  service 
provider’s  network  is  based  on 
the  same  equipment  in  the 


enterprise  backbone. 

“To  the  degree  that  they 
equate  that  with  quality  and 
dependability,  it  gives  us  that 
association,”  Seaton  says. 

Small  and  midsize  enterprises 
care  more  about  service-level 
agreements  (SLA)  and  end-to- 
end  quality  of  service  than 
CPN  certification,  says  David 
Kim,  vice  president  of  Internet 
technologies  at  IXC.  But  the 
service  provider  touts  the  CPN 
designation  to  larger  enterpris¬ 
es  because  they’re  most  likely 
to  be  Cisco  shops  anyway. 

“In  the  [small  to  midsize] 
arena,  we’re  finding  that  CPN 
is  not  as  critical,  but  Cisco  is 
putting  a  lot  of  effort  into  [that 
area]  because  they  see  that  as 
the  largest  opportunity  and 
the  growth  area,”  Kim  says. 
“They’ve  already  captured  the 
large  enterprise.” 

These  views  corroborate  a 


brand  tracking  study  Cisco 
commissioned  this  year  that 
found  that  less  than  half  of  the 
206  enterprises  surveyed 
would  be  more  likely  to  use  an 
ISP  certified  by  Cisco  than  one 
that  is  not.  Outcalt,  though, 
says  the  findings  of  this  study 
actually  exceeded  Cisco’s 
expectations. 

Other  service  providers  say 
sales  lead  generation  was 
never  the  intent  behind  the 
CPN  program,  an  assertion 
Outcalt  concurs  with.  They 
say  it  serves  more  to  break 
down  the  initial  barriers 
between  service  providers 
and  enterprises  via  familiarity 
with  the  equipment  used  in 
each  network. 

“If  you’re  CPN  certified,  it’s 


almost  a  check  in  the  box,” 
says  Jim  Crowder,  vice  presi¬ 
dent  of  strategic  development 
at  Enron.  “That  means  you’ve 
got  compatibility,  you've  met 
certain  standards  and  you’re 
going  to  remove  some  of  the 
variables  involved  in  meeting 
quality-of-service  commit¬ 
ments  and  delivering  on  SLA 
commitments.” 

CPN  helps  foster  peering 
relationships  between  service 
providers,  says  Jackie  Vander- 
brug,  vice  president  of  busi¬ 
ness  development  at  iBasis  in 
suburban  Boston.  IBasis  was 
able  to  establish  peering 
arrangements  with  a  European 
service  provider  and  with  ICG 
in  the  U.S.,  thanks  to  the  CPN 
program,  she  says. 

“Given  the  state  of  interop¬ 
erability  in  our  business,  it’s 
very  difficult  to  work  across 
platforms,”  Vanderbrug  says. 
“[With  CPN]  we  know 
immediately  that  we 
don’t  have  interoper¬ 
ability  issues.  ‘We  can 
work  with  you,  let’s 
exchange  traffic.  ’” 

Sales  leads  “weren’t 
one  of  the  specific 
goals,  but  they  are  one 
of  the  attributes  of  the 
program,”  Outcalt  says. 

Despite  the  indiffer¬ 
ence  of  enterprise  cus¬ 
tomers,  the  CPN  pro¬ 
gram  has  nonetheless 
been  successful  from 
service  providers’  and 
Cisco’s  standpoint. 

To  date  there  are 
179  CPN  service  pro¬ 
viders  in  23  countries, 
less  than  half  of  which 
are  in  the  United 

£ 

States,  Outcalt  says.  | 
“It’s  ahead  of  pace  1 
of  what  we  had  pro¬ 
jected,  so  it’s  considered  a  very 
successful  program  in  Cisco,” 
he  says. 

But  CPN  is  much  more  than 
a  joint  marketing  program.  In 
return  for  equipping  80%  to 
85%  of  their  service  infrastruc¬ 
ture  with  Cisco  gear,  service 
providers  not  only  get  to  flash 
the  Cisco  logo  in  their  market¬ 
ing  campaigns,  but  they  can 
also  tap  Cisco  funding  for 
those  campaigns  and  receive 
technical  assistance  front  the 
data  giant  for  creating  and 
rolling  out  new  services. 

Indeed,  the  CPN  program 
has  expanded  over  the  past 
two  years  from  one  that  is 
branding-focused  to  one  that  is 
focused  on  establishing  busi¬ 
ness  partnerships,  Outcalt  says. 
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“They  help  engineer  and 
oversee  our  network,  and 
stand  behind  it  if  there’s  a 
problem,”  says  Ignatius 
Leonard,  president  of  Caprock, 
a  service  provider  based  in 
Texas  that  just  signed  up  for 
the  CPN  program. “Cisco  had  a 
lot  to  say  in  how  that  network 
was  put  together.  For  me,  that 
was  very  important.” 

Indeed,  one  of  the  criteria 
for  CPN  certification  is  for  the 
service  provider  to  demon¬ 
strate  “industry  leading  levels” 
of  service  quality  and  cus¬ 
tomer  satisfaction,  according 
to  Cisco.  Some  service 
providers  say  Cisco  does  not 
strictly  enforce  these  criteria, 
but  then  again,  the  company 
has  never  been  in  a  position 
where  it  needs  to  be  enforced. 

“Cisco  has  been  instrumen¬ 
tal  in  the  architecture  of  our 
environment  here,”  says  Bobby 
Patrick,  vice  president  of  strat¬ 
egy  and  marketing  for  Digex. 
“Our  requirements  are  abso¬ 
lutely  100%  availability  at  all 
times.  If  they  have  CPN  qualifi¬ 
cation  limits,  I’m  sure  we  don’t 
know  about  them  because  we 
are  doing  it.” 

“One  of  the  reasons  we 
have  our  [Cisco  account]  rep 
on-site  is  to  help  understand 
what’s  going  on  and  what 
we’re  doing  from  a  design 
standpoint,  and  give  us  the 
best  solution  possible,”  says 
Jim  Wilson,  director  of  Internet 
alliances  at  Frontier  Global- 
center.  “They  know  that  the 
network  is  right.  They  do  mon¬ 
itor  it  from  that  standpoint, 
but  I’m  not  aware  really  of  any 
kind  of  performance  metrics 
in  terms  of  our  quality  of  ser¬ 
vice  that  they’re  gauging  right 
now.” 

Cisco  has  two  ways  to  mea¬ 
sure  service  quality,  Outcalt 


says.  One  is  requiring  the  ser¬ 
vice  provider  to  measure  and 
publish  their  network  quality 
data;  the  other  is  feedback 
from  enterprise  customers  on 
how  satisfied  they  are  with 
their  CPN  service. 

“We’ve  never  had  to  use 
that”  in  determining  whether  a 
service  provider  was  fulfilling 
its  CPN  obligation,  Outcalt 
says.  Cisco  reviews  CPN  ser¬ 
vice  quality  and  customer  sat¬ 
isfaction  annually,  he  says. 

The  only  reasons  Cisco  had 
to  rescind  CPN  membership 
from  some  service  providers 
was  because  their  Cisco  equip¬ 
ment  content  fell  below  the 
85%  requirement  or  they  were 
acquired,  he  says. 

And  then  there  are  those 
Cisco  service  provider  cus¬ 
tomers  who  choose  not  to  par¬ 
ticipate  in  the  CPN  program. 
HarvardNet  in  Cambridge, 
Mass.,  and  MindSpring  in 
Atlanta  are  two  such  service 
providers.  For  them,  the  bene¬ 
fits  of  the  CPN  program  did 
not  warrant  the  time  and  trou¬ 
ble  to  swap  out  non-Cisco  gear 
to  reach  the  85%  Cisco- 
equipped  requirement. 

“We  have  a  philosophy  of 
using  the  best  equipment  or 
product  for  the  job  rather  than 
putting  all  of  our  eggs  in  one 
vendor’s  basket,”  says  Brandon 
Ross,  director  of  network  engi¬ 
neering  at  MindSpring.  “After 
all,  that’s  what  internetwork¬ 
ing  is  all  about.” 

That  works  both  ways, 
though.  Cisco’s  Outcalt  says 
there  are  some  service 
providers  that  have  ditched 
their  non-Cisco  equipment  in 
order  to  gain  CPN  status. 

Analysts  also  say  the  CPN 
program  has  been  a  marketing 
success  for  Cisco  and  the  CPN 
service  providers.  But  going 
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forward,  as  services  and  the 
enterprises  that  buy  them 
become  more  sophisticated, 
Cisco  will  need  to  work  more 
closely  with  CPN  partners  on 
network  integration  rather 
than  just  marketing. 

Cisco  can  only  live  off  of  its 
good  name  for  so  long,  ana¬ 
lysts  say.  CPN  must  stand  for 
unique,  reliable  and  value- 
added  services  and  network 
engineering,  rather  than  a  net¬ 
work  that’s  merely  built  with 
Cisco  products. 

“As  all  of  these  services 


[focus  on]  having  flow¬ 
through  provisioning  and 
more  intelligent  customer  net¬ 
work  management,  Cisco  is 
going  to  have  to  evolve  the 
definition  [of  CPN]  to  be  a  lit¬ 
tle  more  rigorous,”  says  Joe 
Baylock,  an  analyst  at  Gartner 
Group. 

The  CPN  program  has  to 
support  more  fully  defined  ser¬ 
vices  in  terms  of  how  enter¬ 
prise  customers  order  them, 
how  the  services  are  managed 
and  provisioned  and  how  they 
perform,  he  says.  3 


More 


IS  YOUR  ISP 
CISCO- POWERED  r 

•  Find  out  if  your  service 
provider  has  received 
the  CPN  seal  of  approval. 
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Start-ups  fiber  gear  could  slash  T-1  prices 


BY  TIM  GREENE 

NORTH  ANDOVER,  MASS. 
—  Start-up  Quantum  Bridge  is 
readying  equipment  that  could 
enable  carriers  to  deliver  T-1 
lines  over  fiber  optic  lines  for 
half  the  price  of  typical  T-1  s. 

By  eliminating  the  need  for 
expensive  electronics  on  the 
fiber  that  runs  from  the  service 
provider  network  to  customer 


sites,  Quantum  Bridge  cuts  car¬ 
rier  equipment  costs  90%  — 
enough  to  bring  about  dramat¬ 
ic  price  cuts,  says  Tony  Zona, 
Quantum  Bridge’s  CEO. 

Using  his  company’s  equip¬ 
ment,  carriers  should  be  able  to 
offer  T- Is  for  $300  per  month 
and  still  be  able  to  pay  off  the 
Quantum  Bridge  gear  within  1 8 
months,  he  says. 


The  alternative  to  the  com¬ 
pany’s  passive  optical  network¬ 
ing  technology  is  SONET,  a 
technology  Zona  and  Quantum 
Bridge  co-founder  Jeff  Gwynne 
worked  on  together  at  Bell 
Labs  and  Lucent.  But  SONET 
requires  multiplexers  at  every 
junction.  Quantum  Bridge 
equipment  eliminates  the  need 
for  SONET  gear  and  uses  pas¬ 
sive  optical  splitters  and  cou¬ 


plers  instead. 

Using  Quantum  Bridge’s 
gear,  carriers  should  be  able  to 
offer  services  between  the 
1.5M  bit/sec  of  a  T-1  and  the 
45M  bit/sec  of  a  T-3,  says 
Rosemary  Cochran,  an  analyst 
with  Vertical  Systems  Group  in 
Dedham,  Mass.  If  a  customer 
needs  more  bandwidth,  the  car¬ 
rier  can  boost  that  customer's 


share  of  a  wavelength  via  man¬ 
agement  software  alone. 

The  technology  seems  par¬ 
ticularly  well-suited  to  transpar¬ 
ent  LAN  services  in  which 
WAN  connections  run  at  full 
LAN  speed,  Cochran  says. 
Quantum  Bridge  is  the  only 
company  she  knows  of  that  is 
working  on  this  type  of  gear. 

The  alternative  to  fiber  dis¬ 
tribution  is  installing  a  network 
of  SONET  multi¬ 
plexers  that  are 
much  more  expen¬ 
sive,  Cochran  says. 

Quantum 
Bridge  is  building 
two  pieces  of 
equipment:  An  op¬ 
tical  access  switch 
transmits  and  re¬ 
ceives  light  signals 
at  the  carrier 
switching  office. 
And  customer-site 
gear,  called  an 
intelligent  optical 
terminal,  puts  cus¬ 
tomer  traffic  on 
and  takes  it  off  the 
fiber. 

The  optical  sig¬ 
nal  is  sent  from 
the  switch  on  a 
single  fiber,  and 
that  signal  can  be 
split  onto  other 
fibers,  like  branch¬ 
es  of  a  tree,  using 
passive  optical  couplers.  This 
lets  a  single  light  signal  reach 
many  customers. 

The  company  will  announce 
pricing  in  January,  and  the 
equipment  will  be  available 
sometime  before  mid-20(K).  Ii 
will  go  into  beta  testing  with 
carriers  at  year-end. 

Quantum  Bridge:  www. 
quantumbridge.com 


Quantum  Bridge  leaps  into  optical  networking 

Quantum  Bridge  is  building  optical  gear  around  Dynamic  Wavelength  Slicing 
and  passive  optical  devices  to  reduce  costs  in  fiber  networks. 


©  The  Quantum  Bridge 
optical  access  switch 
(0AS)  sends  traffic  on 
lightwaves  toward 
customer  sites. 


©  Intelligent  optical 
devices  at  each  site 
pick  data  only  from 
the  time  slots 
assigned  to  them. 


Passive 


Carrier 

switching 

optical  splitter 

OAS 

Fiber  V 
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Customer  A 

office 
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©  The  signal  is  divided  into  time  slots 
designated  for  individual  customers,  a 
process  called  Dynamic  Wavelength 
Slicing.  Passive  splitters  and  couplers  in 
the  network  divert  the  lightwaves  toward 
multiple  customers. 
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Network  World  October  25,  1  999  www.nwfusion.com  8 


Nothin’  but  'Net  and  image 


“I  predict  that  by  2003  the 
major  unit  of  international 
currency  will  be  the  Yahoo!” 

—  Jim  Sterne,  author,  speaker  and  pundit 
who  owes  me  lunch. 


MARK 

GIBBS 


Branding.  It  is  a  central  tenet  of 
modern  marketing  that  brands 
are  to  be  vigorously  built  and 
defended.  But  what  are  brands? 

I'll  take  a  stab  at  a  definition: 
Brands  are  images  that  represent 
the  intangible  qualities  of  the 
brand  owner  and  its  products. 

Perhaps  the  best  example  of 
this  is  Coca-Cola  —  the  definitive 
brand  of  the  20th  century.  Coca- 
Cola,  aka  Coke,  has  had  the  wid¬ 
est  brand  recognition 
of  any  modern  prod¬ 
uct.  But  the  Coca- 
Cola  brand  isn’t 
about  a  carbonated 
drink  that  used  to  be 
made  with  cocaine 
—  it  is  about  a  life¬ 
style,  a  feeling  about 
the  product  and  the 
company  —  “Things 
go  better  with  Coke,” 
goes  the  jingle. 

But  is  Coke  still 
the  top  brand?  No 
longer.  A  recent  study  by  one  of 
the  automakers  showed  that 
among  16-  to  24-year-olds,  Coca- 
Cola  no  longer  holds  the  No.  1 
slot  for  brand  recognition.  Nope, 
Pepsi  didn't  replace  Coke.  Nor 
was  it  Ford,  Kraft  or  any  of  the  tra¬ 
ditional  players.  It  was  (drum  roll, 
please,  maestro)  . . .  Yahoo! 

Honest. 

This  is  our  first  clue  that 
branding  online  is  very  different 
from  off-line  branding.  Online,  a 
brand  can  grow  at  a  rate  that 
Madison  Avenue  couldn’t  have 
imagined  in  its  wildest  dreams. 
This  is  the  result  of  pop  culture 
meeting  the  ’Net  ...  it  starts  with 
1 5  minutes  of  fame  being  spread 
and  replicated  ad  infinitum  by 
word  of  ’Net  and  ends  accelerat¬ 
ing  the  brand  into  orbit. 

Now  here’s  an  interesting 
thing.  Amazon  has  done  what  has 
traditionally  been  considered  sui¬ 
cidal  :The  company  has  moved 
into  a  number  of  areas  that  have 


nothing  to  do  with  what  it  started 
out  doing  and  became  famous  for 
—  that  was,  selling  books.  Now  it 
runs  auctions  and  sells  consumer 
electronics.  Oh,  and  confectionery 
and  lots  more  stuff. 

The  company’s  diversification 
started  when  Amazon  began  sell¬ 
ing  music  and  videos.  No  one  was 
too  shocked  by  that  —  CDs  and 
videos  are  similar  in  distribution 
and  pricing  to  books,  so  it  was 
seen  as  a  logical  and  smart  exten¬ 
sion  of  Amazon’s  focus. 

But  the  entry  into  stereos, 
chocolates  and  video  games  was 
surprising,  and  the  move  into  the 
territory  of  eBay  even  more  unex¬ 
pected.  Amazon  was  doing  what 
has  been  a  disaster  for  many 
brick-and-mortar  retailers  —  it 
was  going  outside  of  its  core 
business  and  consequently  dilut¬ 
ing  its  brand. 

Now  I  contend  that  it  is  virtu¬ 
ally  impossible  for  an  established 
online  property  such  as  Amazon 
to  dilute  its  brand. The  only  way  it 
could  happen  would  be  through 
gross  incompetence.  Hell,  even 
something  as  contentious  as,  say, 
Amazon  operating  a  porno  site 
under  its  name  would  probably  do 
no  damage. 

You  see,  online,  there  is  noth¬ 
ing  but  brand.  Without  real  sales¬ 
people  to  interact  with  and  real 
premises  to  walk  into,  and  pro¬ 
vided  your  content  is  relevant  to 
your  audience,  you  are  judged 
solely  on  how  you  present  your 
content. The  company  is  its 
image,  and  the  image  is  the  com¬ 
pany.  And  as  long  as  you  have  a 
solid  online  style,  everything 
under  your  brand  is  branded 
even  if  that  stuff  spans  markets, 
sales  strategies  and  cultures. 

This  means  that  companies 
such  as  Amazon  can  enter  and 
leave  markets  with  what,  in  tra¬ 
ditional  marketing  terms, 
amounts  to  wild  abandon,  and 
suffer  little  or  no  brand  dilution 
as  long  as  they  maintain  their 
image  and  the  context  in  which 
they  communicate. 

The  message  is  clear:  Online, 
your  company  is  judged  by  its 
image  and  style.  Everything  else  is 
content.  Appearance  is  all. 

Altered  images  to  nwcolumn @ 
gibbs.com 


Do  you  know  anyone  who  does  not 
have  e-mail?  Between  the  two  of  us,  a  col¬ 
league  and  I  came  up  with  exactly  two  such 
people:  my  73-year-old  father,  who  doesn't 
even  have  an  ATM  card,  and  the  colleague's 
grandmother,  who  while  not  having  e-mail 
has  still  managed  to  send  some  from  a 
neighbor's  PC. 

We  are  indeed  a  wired  bunch,  especially 
those  of  us  who  live  and  breathe  this  stuff  in 
order  to  put  food  on  the  table  and  bring 
broadband  into  our  homes. 

But  it's  still  worth  remembering  as  we  ride 
the  caboose  of  the  20th  century  that  we  do 
have  a  rather  skewed  view  of  where  the  Internet  stands  in  the  grand 
scheme  of  things  ...  at  least  at  this  very  moment.  While  there  is  every 
reason  to  believe  the  wired  masses  will  continue  to  mushroom,  a  new 
survey  from  Scarborough  Research  gives  a  good  read  on  how  much 
headroom  remains.  The  survey  also  sheds  light  on  the  geographic 
breakdown  of  that  much-discussed  disparity  between  Internet 
"haves"  and  "have  nots." 

According  to  Scarborough,  five  U.S.  cities  have  exceeded  50%  pen¬ 
etration  in  terms  of  the  number  of  adults  who  can  access  the  Internet 
at  home  or  at  work.  Washington,  D.C.  ranks  first  with  59.9%  online,  fol¬ 
lowed  by  San  Francisco  (56.1%);  Austin  (55.5%);  Seattle  (53.3%)  and 
Salt  Lake  City  (50%).  No  shockers  here,  except  perhaps  for  Salt  Lake 
City  (although  anyone  who  has  been  to  Novell's  BrainShare  confer¬ 
ence  will  appreciate  the  role  the  Internet  might  play  in  supplementing 
that  city's  nightlife). 

The  bottom  five,  or  least-connected,  cities  in  the  Scarborough  sur¬ 
vey,  were  Wilkes  Barre,  Pa.  (32.8%);  Charleston,  W.Va.  (32.4%);  Tulsa, 
Okla.  (32.3%);  Birmingham,  Ala.  (32.2%);  and  Pittsburgh  (30.8%). 

One  need  not  be  a  Harvard  economist  or  dig  too  deeply  into  the 
demographic  data  to  explain  the  disparities:  Money  talks  on  the 
Internet,  just  like  it  does  everywhere  else.  A  last  data  point  from  the 
research:  Of  the  170,000  adults  surveyed  in  64  top  U.S.  markets,  43.7% 
are  online.  Which  means  that  more  than  half  of  American  adults  still 
don't  have  e-mail  and  aren't  shopping  online.  I  don't  know  them,  and 
my  colleague  doesn't  know  them.  But  you  can  be  sure  my  father  and 
my  colleague's  grandmother  know  plenty. 


PAUL 

MCNAMARA 


Sometimes  you  can  judge  a  start-up  by  the  company  it 
keeps  ...  as  in  the  company  from  which  it  keeps  getting  money. 

Vision  Software  —  a  maker  of  software  designed  to  automate  and 
simplify  the  process  of  building  e-business  applications  —  last  week 
landed  a  $15.7  million  mezzanine  round  of  financing  led  by  Goldman 
Sachs.  Previous  investors  include  The  Paul  Allen  Group,  Hambrecht  & 
Quist,  SAP  co-founder  Hasso  Plattner  and  Netscape/AOL  celebrity 
technologist  Marc  Andreessen. 

While  not  willing  to  provide  specific  numbers,  Vision  executives  say 
revenue  is  up  350%  this  year  over  last,  and  120  new  customers  were 
signed  on  in  1999.  In  addition,  the  company  recently  announced  a 
strategic  arrangement  with  IBM  to  integrate  Vision's  e-business 
automation  software  with  Big  Blue's  WebSphere  Application  Server. 

Vision  is  targeting  next  quarter  for  an  IPO.  ...  Could  be  a  corker. 


It  was  only  a  matter  of  time  before  Minnesota's  cartoon  char¬ 
acter  of  a  governor  made  his  presence  known  on  the  'Net.  Here's  the 
first  line  from  a  press  release  that  crossed  my  desk  recently: 

"Gov.  Jesse  Ventura  is  the  first  U.S.  governor  to  put  his  digital  sig¬ 
nature  on  a  document,  as  the  state  of  Minnesota  this  week  becomes 
the  first  state  in  the  country  to  adopt  digital  signature  technology  for 
secure  Internet  communications." 

Bully  for  Minnesota  and  bully  for  Ventura.  . . .  Who  knew  they  could 
do  digital  signatures  in  crayon? 

Readers  are  encouraged  to  foncard  Internet  news  tips,  gos¬ 
sip  items  or  messages  for  McNamara's  Luddite  dad  to 
buzz@nww.com  or  (508)  820-7471. 
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